Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 132

Question list

List of questions

Question 1311

(0)

In order to provide dual assurance in a digital signature system, the design MUST include which of the following?

Question 1312

(0)

Which of the following attacks, if successful, could give an intruder complete control of a softwaredefined networking (SDN) architecture?

Question 1313

(0)

What type of investigation applies when malicious behavior is suspected between two organizations?

Question 1314

(0)

The Chief Information Security Officer (CISO) of a small organization is making a case for building a security operations center (SOC). While debating between an in-house, fully outsourced, or a hyb

Question 1315

(0)

What are the three key benefits that application developers should derive from the northbound application programming interface (API) of software defined networking (SDN)?

Question 1316

(0)

What security principle addresses the issue of "Security by Obscurity"?

Question 1317

(0)

In Federated Identity Management (FIM), which of the following represents the concept of federation?

Question 1318

(0)

A software engineer uses automated tools to review application code and search for application flaws, back doors, or other malicious code. Which of the following is the FIRST Software Development Li

Question 1319

(0)

Which of the following vulnerability assessment activities BEST exemplifies the Examine method of assessment?

Question 1320

(0)

Which of the following is the MOST appropriate control for asset data labeling procedures?

Question 1311

In order to provide dual assurance in a digital signature system, the design MUST include which of the following?

The public key must be unique for the signed document.

signature process must generate adequate authentication credentials.

The hash of the signed document must be present.

The encrypted private key must be provided in the signing certificate.

Show Answer Comment (0)

Question 1312

Which of the following attacks, if successful, could give an intruder complete control of a softwaredefined networking (SDN) architecture?

Sniffing the traffic of a compromised host inside the network

Sending control messages to open a flow that does not pass a firewall from a compromised host within the network

A brute force password attack on the Secure Shell (SSH) port of the controller

Remote Authentication Dial-In User Service (RADIUS) token replay attack

Show Answer Comment (0)

Question 1313

What type of investigation applies when malicious behavior is suspected between two organizations?

Regulatory

Criminal

Civil

Operational

Show Answer Comment (0)

The Chief Information Security Officer (CISO) of a small organization is making a case for building a security operations center (SOC). While debating between an in-house, fully outsourced, or a hybrid capability, which of the following would be the MAIN consideration, regardless of the model?

Skill set and training

Headcount and capacity

Tools and technologies

Scope and service catalog

Show Answer Comment (0)

Question 1315

What are the three key benefits that application developers should derive from the northbound application programming interface (API) of software defined networking (SDN)?

Familiar syntax, abstraction of network topology, and definition of network protocols

Network syntax, abstraction of network flow, and abstraction of network protocols

Network syntax, abstraction of network commands, and abstraction of network protocols

Familiar syntax, abstraction of network topology, and abstraction of network protocols

Show Answer Comment (0)

Question 1316

What security principle addresses the issue of "Security by Obscurity"?

Open design

Segregation of duties (SoD)

Role Based Access Control (RBAC)

Least privilege

Show Answer Comment (0)

Question 1317

In Federated Identity Management (FIM), which of the following represents the concept of federation?

Collection of information logically grouped into a single entity

Collection, maintenance, and deactivation of user objects and attributes in one or more systems, directories or applications

Collection of information for common identities in a system

Collection of domains that have established trust among themselves

Show Answer Comment (0)

Question 1318

A software engineer uses automated tools to review application code and search for application flaws, back doors, or other malicious code. Which of the following is the FIRST Software Development Life Cycle (SDLC) phase where this takes place?

Design

Test

Development

Deployment

Show Answer Comment (0)