Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 134

Question list

List of questions

Question 1331

(0)

A Chief Information Security Officer (CISO) of a firm which decided to migrate to cloud has been tasked with ensuring an optimal level of security. Which of the following would be the FIRST consider

Question 1332

(0)

Which technique helps system designers consider potential security concerns of their systems and applications?

Question 1333

(0)

What is the MOST important goal of conducting security assessments?

Question 1334

(0)

A hospital's building controls system monitors and operates the environmental equipment to maintain a safe and comfortable environment. Which of the following could be used to minimize the risk of u

Question 1335

(0)

To monitor the security of buried data lines inside the perimeter of a facility, which of the following is the MOST effective control?

Question 1336

(0)

What is the BEST method to use for assessing the security impact of acquired software?

Question 1337

(0)

Which of the following is the MOST effective way to ensure the endpoint devices used by remote users are compliant with an organization's approved policies before being allowed on the network?

Question 1338

(0)

Which of the following factors should be considered characteristics of Attribute Based Access Control (ABAC) in terms of the attributes used?

Question 1339

(0)

A security architect is developing an information system for a client. One of the requirements is to deliver a platform that mitigates against common vulnerabilities and attacks, What is the MOST ef

Question 1340

(0)

A security engineer is assigned to work with the patch and vulnerability management group. The deployment of a new patch has been approved and needs to be applied. The research is complete, and the

Question 1331

A Chief Information Security Officer (CISO) of a firm which decided to migrate to cloud has been tasked with ensuring an optimal level of security. Which of the following would be the FIRST consideration?

Define the cloud migration roadmap and set out which applications and data repositories should be moved into the cloud.

Ensure that the contract between the cloud vendor and the firm clearly defines responsibilities for operating security controls.

Analyze the firm's applications and data repositories to determine the relevant control requirements.

Request a security risk assessment of the cloud vendor be completed by an independent third- party.

Show Answer Comment (0)

Question 1332

Which technique helps system designers consider potential security concerns of their systems and applications?

Penetration testing

Threat modeling

Manual inspections and reviews

Source code review

Show Answer Comment (0)

Question 1333

What is the MOST important goal of conducting security assessments?

To prepare the organization for an external audit, particularly by a regulatory entity

To discover unmitigated security vulnerabilities, and propose paths for mitigating them

To align the security program with organizational risk appetite

To demonstrate proper function of security controls and processes to senior management

Show Answer Comment (0)

Question 1334

A hospital's building controls system monitors and operates the environmental equipment to maintain a safe and comfortable environment. Which of the following could be used to minimize the risk of utility supply interruption?

Digital devices that can turn equipment off and continuously cycle rapidly in order to increase supplies and conceal activity on the hospital network

Standardized building controls system software with high connectivity to hospital networks

Lock out maintenance personnel from the building controls system access that can impact critical utility supplies

Digital protection and control devices capable of minimizing the adverse impact to critical utility

Show Answer Comment (0)

Question 1335

To monitor the security of buried data lines inside the perimeter of a facility, which of the following is the MOST effective control?

Fencing around the facility with closed-circuit television (CCTV) cameras at all entry points

Ground sensors installed and reporting to a security event management (SEM) system

Steel casing around the facility ingress points

regular sweeps of the perimeter, including manual inspection of the cable ingress points

Show Answer Comment (0)

Question 1336

What is the BEST method to use for assessing the security impact of acquired software?

Common vulnerability review

Software security compliance validation

Threat modeling

Vendor assessment

Show Answer Comment (0)

Question 1337

Which of the following is the MOST effective way to ensure the endpoint devices used by remote users are compliant with an organization's approved policies before being allowed on the network?

Group Policy Object (GPO)

Network Access Control (NAC)

Mobile Device Management (MDM)

Privileged Access Management (PAM)

Show Answer Comment (0)

Question 1338

Which of the following factors should be considered characteristics of Attribute Based Access Control (ABAC) in terms of the attributes used?

Mandatory Access Control (MAC) and Discretionary Access Control (DAC)

Discretionary Access Control (DAC) and Access Control List (ACL)

Role Based Access Control (RBAC) and Mandatory Access Control (MAC)

Role Based Access Control (RBAC) and Access Control List (ACL)

Show Answer Comment (0)

Question 1339

A security architect is developing an information system for a client. One of the requirements is to deliver a platform that mitigates against common vulnerabilities and attacks, What is the MOST efficient option used to prevent buffer overflow attacks?

Process isolation

Address Space Layout Randomization (ASLR)

Processor states

Access control mechanisms

Show Answer Comment (0)

Question 1340

A security engineer is assigned to work with the patch and vulnerability management group. The deployment of a new patch has been approved and needs to be applied.

The research is complete, and the security engineer has provided recommendations. Where should the patch be applied FIRST?

Server environment

Desktop environment

Lower environment

Production environment

Show Answer Comment (0)

Total 1.482 questions