Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 143

Question list

List of questions

Question 1421

(0)

Which of the following is the FIRST step an organization's security professional performs when defining a cyber-security program based upon industry standards?

Question 1422

(0)

What are the PRIMARY responsibilities of security operations for handling and reporting violations and incidents?

Question 1423

(0)

An internal audit for an organization recently identified malicious actions by a user account. Upon further investigation, it was determined the offending user account was used by multiple people at

Question 1424

(0)

Which of the following are all elements of a disaster recovery plan (DRP)?

Question 1425

(0)

Which of the following BEST ensures the integrity of transactions to intended recipients?

Question 1426

(0)

A breach investigation ...... a website was exploited through an open soured ......Is The FIRB Stan In the Process that could have prevented this breach?

Question 1427

(0)

Which of the following statements is TRUE about Secure Shell (SSH)?

Question 1428

(0)

What type of database attack would allow a customer service employee to determine quarterly sales results before they are publically announced?

Question 1429

(0)

Which of the following frameworks provides vulnerability metrics and characteristics to support the National Vulnerability Database (NVD)?

Question 1430

(0)

Which of the following would be the BEST mitigation practice for man-in-the-middle (MITM) Voice over Internet Protocol (VoIP) attacks?

Question 1421

Which of the following is the FIRST step an organization's security professional performs when defining a cyber-security program based upon industry standards?

Map the organization's current security practices to industry standards and frameworks.

Define the organization's objectives regarding security and risk mitigation.

Select from a choice of security best practices.

Review the past security assessments.

Show Answer Comment (0)

Question 1422

What are the PRIMARY responsibilities of security operations for handling and reporting violations and incidents?

Monitoring and identifying system failures, documenting incidents for future analysis, and scheduling patches for systems

Scheduling patches for systems, notifying the help desk, and alerting key personnel

Monitoring and identifying system failures, alerting key personnel, and containing events

Documenting incidents for future analysis, notifying end users, and containing events

Show Answer Comment (0)

An internal audit for an organization recently identified malicious actions by a user account. Upon further investigation, it was determined the offending user account was used by multiple people at multiple locations simultaneously for various services and applications. What is the BEST method to prevent this problem in the future?

Ensure the security information and event management (SIEM) is set to alert.

Inform users only one user should be using the account at a time.

Ensure each user has their own unique account,

Allow several users to share a generic account.

Show Answer Comment (0)

Question 1424

Which of the following are all elements of a disaster recovery plan (DRP)?

Document the actual location of the ORP, developing an incident notification procedure, evaluating costs of critical components

Document the actual location of the ORP, developing an incident notification procedure, establishing recovery locations

Maintain proper documentation of all server logs, developing an incident notification procedure, establishing recovery locations

Document the actual location of the ORP, recording minutes at all ORP planning sessions, establishing recovery locations

Show Answer Comment (0)

Question 1425

Which of the following BEST ensures the integrity of transactions to intended recipients?

Public key infrastructure (PKI)

Blockchain technology

Pre-shared key (PSK)

Web of trust

Show Answer Comment (0)

Question 1426

A breach investigation ...... a website was exploited through an open soured ......Is The FIRB Stan In the Process that could have prevented this breach?

Application whitelisting

Web application firewall (WAF)

Vulnerability remediation

Software inventory

Show Answer Comment (0)