Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 140

Question list

List of questions

Question 1391

(0)

The existence of physical barriers, card and personal identification number (PIN) access systems, cameras, alarms, and security guards BEST describes this security approach?

Question 1392

(0)

A software architect has been asked to build a platform to distribute music to thousands of users on a global scale. The architect has been reading about content delivery networks (CDN). Which of th

Question 1393

(0)

Which of the following BEST describes centralized identity management?

Question 1394

(0)

A database server for a financial application is scheduled for production deployment. Which of the following controls will BEST prevent tampering?

Question 1395

(0)

What is the FIRST step that should be considered in a Data Loss Prevention (DLP) program?

Question 1396

(0)

What is the benefit of an operating system (OS) feature that is designed to prevent an application from executing code from a non-executable memory region?

Question 1397

(0)

What Hypertext Transfer Protocol (HTTP) response header can be used to disable the execution ofinline JavaScript and the execution of eval()-type functions?

Question 1398

(0)

Which section of the assessment report addresses separate vulnerabilities, weaknesses, and gaps?

Question 1399

(0)

In a quarterly system access review, an active privileged account was discovered that did not exist in the prior review on the production system. The account was created one hour after the previous

Question 1400

(0)

When recovering from an outage, what is the Recovery Point Objective (RPO), in terms of data recovery?

Question 1391

The existence of physical barriers, card and personal identification number (PIN) access systems, cameras, alarms, and security guards BEST describes this security approach?

Security information and event management (SIEM)

Security perimeter

Defense-in-depth

Access control

Show Answer Comment (0)

A software architect has been asked to build a platform to distribute music to thousands of users on a global scale. The architect has been reading about content delivery networks (CDN). Which of the following is a principal task to undertake?

Establish a service-oriented architecture (SOA).

Establish a media caching methodology.

Establish relationships with hundreds of Internet service providers (ISP).

Establish a low-latency wide area network (WAN).

Show Answer Comment (0)

Question 1393

Which of the following BEST describes centralized identity management?

Service providers rely on a trusted third party (TTP) to provide requestors with both credentials and identifiers.

Service providers agree to integrate identity system recognition across organizational boundaries.

Service providers identify an entity by behavior analysis versus an identification factor.

Service providers perform as both the credential and identity provider (IdP).

Show Answer Comment (0)

Question 1394

A database server for a financial application is scheduled for production deployment. Which of the following controls will BEST prevent tampering?

Service accounts removal

Data validation

Logging and monitoring

Data sanitization

Show Answer Comment (0)

Question 1395

What is the FIRST step that should be considered in a Data Loss Prevention (DLP) program?

Configuration management (CM)

Information Rights Management (IRM)

Policy creation

Data classification

Show Answer Comment (0)

Question 1396

What is the benefit of an operating system (OS) feature that is designed to prevent an application from executing code from a non-executable memory region?

Identifies which security patches still need to be installed on the system

Stops memory resident viruses from propagating their payload

Reduces the risk of polymorphic viruses from encrypting their payload

Helps prevent certain exploits that store code in buffers

Show Answer Comment (0)

Question 1397

What Hypertext Transfer Protocol (HTTP) response header can be used to disable the execution ofinline JavaScript and the execution of eval()-type functions?

Strict-Transport-Security

X-XSS-Protection

X-Frame-Options

Content-Security-Policy

Show Answer Comment (0)

Question 1398

Which section of the assessment report addresses separate vulnerabilities, weaknesses, and gaps?

Key findings section

Executive summary with full details

Risk review section

Findings definition section

Show Answer Comment (0)

Question 1399

In a quarterly system access review, an active privileged account was discovered that did not exist in the prior review on the production system. The account was created one hour after the previous access review. Which of the following is the BEST option to reduce overall risk in addition to quarterly access reviews?

Increase logging levels.

Implement bi-annual reviews.

Create policies for system access.

Implement and review risk-based alerts.

Show Answer Comment (0)