Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 133

Question list

List of questions

Question 1321

(0)

What BEST describes the confidentiality, integrity, availability triad?

Question 1322

(0)

When developing an external facing web-based system, which of the following would be the MAIN focus of the security assessment prior to implementation and production?

Question 1323

(0)

What type of risk is related to the sequences of value-adding and managerial activities undertaken in an organization?

Question 1324

(0)

In an environment where there is not full administrative control over all network connected endpoints, such as a university where non-corporate devices are used, what is the BEST way to restrict acc

Question 1325

(0)

Which of the following threats would be MOST likely mitigated by monitoring assets containing open source libraries for vulnerabilities?

Question 1326

(0)

Which of the following is the BEST way to determine the success of a patch management process?

Question 1327

(0)

A company needs to provide employee access to travel services, which are hosted by a third-party service provider, Employee experience is important, and when users are already authenticated, access

Question 1328

(0)

Why is data classification control important to an organization?

Question 1329

(0)

Which of the following is the strongest physical access control?

Question 1330

(0)

While dealing with the consequences of a security incident, which of the following security controls are MOST appropriate?

Question 1321

What BEST describes the confidentiality, integrity, availability triad?

A tool used to assist in understanding how to protect the organization's data

The three-step approach to determine the risk level of an organization

The implementation of security systems to protect the organization's data

A vulnerability assessment to see how well the organization's data is protected

Show Answer Comment (0)

Question 1322

When developing an external facing web-based system, which of the following would be the MAIN focus of the security assessment prior to implementation and production?

Assessing the Uniform Resource Locator (URL)

Ensuring Secure Sockets Layer (SSL) certificates are signed by a certificate authority

Ensuring that input validation is enforced

Ensuring Secure Sockets Layer (SSL) certificates are internally signed

Show Answer Comment (0)

Question 1323

What type of risk is related to the sequences of value-adding and managerial activities undertaken in an organization?

Demand risk

Process risk

Control risk

Supply risk

Show Answer Comment (0)

In an environment where there is not full administrative control over all network connected endpoints, such as a university where non-corporate devices are used, what is the BEST way to restrict access to the network?

Use switch port security to limit devices connected to a particular switch port.

Use of virtual local area networks (VLAN) to segregate users.

Use a client-based Network Access Control (NAC) solution.

Use a clientless Network Access Control (NAC) solution

Show Answer Comment (0)

Question 1325

Which of the following threats would be MOST likely mitigated by monitoring assets containing open source libraries for vulnerabilities?

Distributed denial-of-service (DDoS) attack

Zero-day attack

Phishing attempt

Advanced persistent threat (APT) attempt

Show Answer Comment (0)

Question 1326

Which of the following is the BEST way to determine the success of a patch management process?

Analysis and impact assessment

Auditing and assessment

Configuration management (CM)

Change management

Show Answer Comment (0)

Question 1327

A company needs to provide employee access to travel services, which are hosted by a third-party service provider, Employee experience is important, and when users are already authenticated, access to the travel portal is seamless.

Which of the following methods is used to share information and grant user access to the travel portal?

Security Assertion Markup Language (SAML) access

Single sign-on (SSO) access

Open Authorization (OAuth) access

Federated access

Show Answer Comment (0)