ExamGecko
Search Search Login
Home Home / ISC / CISSP
Ask QuestionAsk Question

ISC CISSP Practice Test - Questions Answers, Page 14

Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which Open Systems Interconnection (OSI) layer(s) BEST corresponds to the network access layer in the Transmission Control Protocol/Internet Protocol (TCP/IP) model?
All of the following items should be included in a Business Impact Analysis (BIA) questionnaire EXCEPT questions that
An organization is preparing to achieve General Data Protection Regulation (GDPR) compliance. The Chief Information Security Officer (CISO) is reviewing data protection methods. Which of the following is the BEST data protection method?
Which one of the following would cause an immediate review and possible change to the security policies of an organization?
Which of the following are all elements of a disaster recovery plan (DRP)?
What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?
Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?
Which of the following would BEST support effective testing of patch compatibility when patches are applied to an organization's systems?
Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?
In what phase of the System Development Life Cycle (SDLC) should security training for the development team begin?

Question 131

Report
Export
Collapse

At a MINIMUM, a formal review of any Disaster Recovery Plan (DRP) should be conducted

A.
monthly.
A.
monthly.
Answers
B.
quarterly.
B.
quarterly.
Answers
C.
annually.
C.
annually.
Answers
D.
bi-annually.
D.
bi-annually.
Answers
Suggested answer: C
asked 18/09/2024
Anna Panagiotidou
34 questions

Question 132

Report
Export
Collapse

Checking routing information on e-mail to determine it is in a valid format and contains valid information is an example of which of the following anti-spam approaches?

A.
Simple Mail Transfer Protocol (SMTP) blacklist
A.
Simple Mail Transfer Protocol (SMTP) blacklist
Answers
B.
Reverse Domain Name System (DNS) lookup
B.
Reverse Domain Name System (DNS) lookup
Answers
C.
Hashing algorithm
C.
Hashing algorithm
Answers
D.
Header analysis
D.
Header analysis
Answers
Suggested answer: D
asked 18/09/2024
Nick Endrikat
32 questions

Question 133

Report
Export
Collapse

During an audit of system management, auditors find that the system administrator has not been trained. What actions need to be taken at once to ensure the integrity of systems?

A.
A review of hiring policies and methods of verification of new employees
A.
A review of hiring policies and methods of verification of new employees
Answers
B.
A review of all departmental procedures
B.
A review of all departmental procedures
Answers
C.
A review of all training procedures to be undertaken
C.
A review of all training procedures to be undertaken
Answers
D.
A review of all systems by an experienced administrator
D.
A review of all systems by an experienced administrator
Answers
Suggested answer: D
asked 18/09/2024
Sai C H
33 questions

Question 134

Report
Export
Collapse

An internal Service Level Agreement (SLA) covering security is signed by senior managers and is in place. When should compliance to the SLA be reviewed to ensure that a good security posture is being delivered?

A.
As part of the SLA renewal process
A.
As part of the SLA renewal process
Answers
B.
Prior to a planned security audit
B.
Prior to a planned security audit
Answers
C.
Immediately after a security breach
C.
Immediately after a security breach
Answers
D.
At regularly scheduled meetings
D.
At regularly scheduled meetings
Answers
Suggested answer: D
asked 18/09/2024
Amar Lojo
30 questions

Question 135

Report
Export
Collapse

Which of the following is the best practice for testing a Business Continuity Plan (BCP)?

A.
Test before the IT Audit
A.
Test before the IT Audit
Answers
B.
Test when environment changes
B.
Test when environment changes
Answers
C.
Test after installation of security patches
C.
Test after installation of security patches
Answers
D.
Test after implementation of system patches
D.
Test after implementation of system patches
Answers
Suggested answer: B
asked 18/09/2024
Salman Hashmi
39 questions

Question 136

Report
Export
Collapse

Which of the following MUST be done when promoting a security awareness program to senior management?

A.
Show the need for security; identify the message and the audience
A.
Show the need for security; identify the message and the audience
Answers
B.
Ensure that the security presentation is designed to be all-inclusive
B.
Ensure that the security presentation is designed to be all-inclusive
Answers
C.
Notify them that their compliance is mandatory
C.
Notify them that their compliance is mandatory
Answers
D.
Explain how hackers have enhanced information security
D.
Explain how hackers have enhanced information security
Answers
Suggested answer: D
asked 18/09/2024
Luis Morales
30 questions

Question 137

Report
Export
Collapse

Which of the following is a security feature of Global Systems for Mobile Communications (GSM)?

A.
It uses a Subscriber Identity Module (SIM) for authentication.
A.
It uses a Subscriber Identity Module (SIM) for authentication.
Answers
B.
It uses encrypting techniques for all communications.
B.
It uses encrypting techniques for all communications.
Answers
C.
The radio spectrum is divided with multiple frequency carriers.
C.
The radio spectrum is divided with multiple frequency carriers.
Answers
D.
The signal is difficult to read as it provides end-to-end encryption.
D.
The signal is difficult to read as it provides end-to-end encryption.
Answers
Suggested answer: A
asked 18/09/2024
Tim baxter
41 questions

Question 138

Report
Export
Collapse

A disadvantage of an application filtering firewall is that it can lead to

A.
a crash of the network as a result of user activities.
A.
a crash of the network as a result of user activities.
Answers
B.
performance degradation due to the rules applied.
B.
performance degradation due to the rules applied.
Answers
C.
loss of packets on the network due to insufficient bandwidth.
C.
loss of packets on the network due to insufficient bandwidth.
Answers
D.
Internet Protocol (IP) spoofing by hackers.
D.
Internet Protocol (IP) spoofing by hackers.
Answers
Suggested answer: B
asked 18/09/2024
Yuwadee Srisathan
40 questions

Question 139

Report
Export
Collapse

What is the MOST important purpose of testing the Disaster Recovery Plan (DRP)?

A.
Evaluating the efficiency of the plan
A.
Evaluating the efficiency of the plan
Answers
B.
Identifying the benchmark required for restoration
B.
Identifying the benchmark required for restoration
Answers
C.
Validating the effectiveness of the plan
C.
Validating the effectiveness of the plan
Answers
D.
Determining the Recovery Time Objective (RTO)
D.
Determining the Recovery Time Objective (RTO)
Answers
Suggested answer: C
asked 18/09/2024
martijn Spelt
41 questions

Question 140

Report
Export
Collapse

Following the completion of a network security assessment, which of the following can BEST be demonstrated?

A.
The effectiveness of controls can be accurately measured
A.
The effectiveness of controls can be accurately measured
Answers
B.
A penetration test of the network will fail
B.
A penetration test of the network will fail
Answers
C.
The network is compliant to industry standards
C.
The network is compliant to industry standards
Answers
D.
All unpatched vulnerabilities have been identified
D.
All unpatched vulnerabilities have been identified
Answers
Suggested answer: A
asked 18/09/2024
Alysson Rodrigo Freires Neto
44 questions
Total 1.482 questions
Go to page: of 149
ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy policy
Terms
Disclaimer
Refund policy
Copyright
Twitter X
Facebook
Medium