Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 16

Question list

List of questions

Question 151

(0)

The goal of software assurance in application development is to

Question 152

(0)

What is the ultimate objective of information classification?

Question 153

(0)

In a financial institution, who has the responsibility for assigning the classification to a piece of information?

Question 154

(0)

An organization is designing a large enterprise-wide document repository system. They plan to have several different classification level areas with increasing levels of controls. The BEST way to en

Question 155

(0)

What technique BEST describes antivirus software that detects viruses by watching anomalous behavior?

Question 156

(0)

Contingency plan exercises are intended to do which of the following?

Question 157

(0)

Two companies wish to share electronic inventory and purchase orders in a supplier and client relationship. What is the BEST security solution for them?

Question 158

(0)

Including a Trusted Platform Module (TPM) in the design of a computer system is an example of a technique to what?

Question 159

(0)

What a patch management program?

Question 160

(0)

Which of the following is an open standard for exchanging authentication and authorization data between parties?

Question 151

The goal of software assurance in application development is to

enable the development of High Availability (HA) systems.

facilitate the creation of Trusted Computing Base (TCB) systems.

prevent the creation of vulnerable applications.

encourage the development of open source applications.

Show Answer Comment (0)

Question 152

What is the ultimate objective of information classification?

To assign responsibility for mitigating the risk to vulnerable systems

To ensure that information assets receive an appropriate level of protection

To recognize that the value of any item of information may change over time

To recognize the optimal number of classification categories and the benefits to be gained from their use

Show Answer Comment (0)

Question 153

In a financial institution, who has the responsibility for assigning the classification to a piece of information?

Chief Financial Officer (CFO)

Chief Information Security Officer (CISO)

Originator or nominated owner of the information

Department head responsible for ensuring the protection of the information

Show Answer Comment (0)

An organization is designing a large enterprise-wide document repository system. They plan to have several different classification level areas with increasing levels of controls. The BEST way to ensure document confidentiality in the repository is to

encrypt the contents of the repository and document any exceptions to that requirement.

utilize Intrusion Detection System (IDS) set drop connections if too many requests for documents are detected.

keep individuals with access to high security areas from saving those documents into lower security areas.

require individuals with access to the system to sign Non-Disclosure Agreements (NDA).

Show Answer Comment (0)

Question 155

What technique BEST describes antivirus software that detects viruses by watching anomalous behavior?

Signature

Inference

Induction

Heuristic

Show Answer Comment (0)

Question 156

Contingency plan exercises are intended to do which of the following?

Train personnel in roles and responsibilities

Validate service level agreements

Train maintenance personnel

Validate operation metrics

Show Answer Comment (0)

Question 157

Two companies wish to share electronic inventory and purchase orders in a supplier and client relationship. What is the BEST security solution for them?

Write a Service Level Agreement (SLA) for the two companies.

Set up a Virtual Private Network (VPN) between the two companies.

Configure a firewall at the perimeter of each of the two companies.

Establish a File Transfer Protocol (FTP) connection between the two companies.

Show Answer Comment (0)