Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 18

Question list

List of questions

Question 171

(0)

Which of the following is the FIRST action that a system administrator should take when it is revealed during a penetration test that everyone in an organization has unauthorized access to a server

Question 172

(0)

Which of the following wraps the decryption key of a full disk encryption implementation and ties the hard disk drive to a particular device?

Question 173

(0)

The three PRIMARY requirements for a penetration test are

Question 174

(0)

Which of the following is an attacker MOST likely to target to gain privileged access to a system?

Question 175

(0)

Why is a system's criticality classification important in large organizations?

Question 176

(0)

By allowing storage communications to run on top of Transmission Control Protocol/Internet Protocol (TCP/IP) with a Storage Area Network (SAN), the

Question 177

(0)

In Disaster Recovery (DR) and business continuity training, which BEST describes a functional drill?

Question 178

(0)

Which of the following does the Encapsulating Security Payload (ESP) provide?

Question 179

(0)

Which one of the following security mechanisms provides the BEST way to restrict the execution of privileged procedures?

Question 180

(0)

What is an effective practice when returning electronic storage media to third parties for repair?

Question 171

Which of the following is the FIRST action that a system administrator should take when it is revealed during a penetration test that everyone in an organization has unauthorized access to a server holding sensitive data?

Immediately document the finding and report to senior management.

Use system privileges to alter the permissions to secure the server

Continue the testing to its completion and then inform IT management

Terminate the penetration test and pass the finding to the server management team

Show Answer Comment (0)

Question 172

Which of the following wraps the decryption key of a full disk encryption implementation and ties the hard disk drive to a particular device?

Trusted Platform Module (TPM)

Preboot eXecution Environment (PXE)

Key Distribution Center (KDC)

Simple Key-Management for Internet Protocol (SKIP)

Show Answer Comment (0)

Question 173

The three PRIMARY requirements for a penetration test are

A defined goal, limited time period, and approval of management

A general objective, unlimited time, and approval of the network administrator

An objective statement, disclosed methodology, and fixed cost

A stated objective, liability waiver, and disclosed methodology

Show Answer Comment (0)

Question 174

Which of the following is an attacker MOST likely to target to gain privileged access to a system?

Programs that write to system resources

Programs that write to user directories

Log files containing sensitive information

Log files containing system calls

Show Answer Comment (0)

Question 175

Why is a system's criticality classification important in large organizations?

It provides for proper prioritization and scheduling of security and maintenance tasks.

It reduces critical system support workload and reduces the time required to apply patches.

It allows for clear systems status communications to executive management.

It provides for easier determination of ownership, reducing confusion as to the status of the asset.

Show Answer Comment (0)

Question 176

By allowing storage communications to run on top of Transmission Control Protocol/Internet Protocol (TCP/IP) with a Storage Area Network (SAN), the

confidentiality of the traffic is protected.

opportunity to sniff network traffic exists.

opportunity for device identity spoofing is eliminated.

storage devices are protected against availability attacks.

Show Answer Comment (0)

Question 177

In Disaster Recovery (DR) and business continuity training, which BEST describes a functional drill?

A full-scale simulation of an emergency and the subsequent response functions

A specific test by response teams of individual emergency response functions

A functional evacuation of personnel

An activation of the backup site

Show Answer Comment (0)

Question 178

Which of the following does the Encapsulating Security Payload (ESP) provide?

Authorization and integrity

Availability and integrity

Integrity and confidentiality

Authorization and confidentiality

Show Answer Comment (0)

Question 179

Which one of the following security mechanisms provides the BEST way to restrict the execution of privileged procedures?

Role Based Access Control (RBAC)

Biometric access control

Federated Identity Management (IdM)

Application hardening

Show Answer Comment (0)

Question 180

What is an effective practice when returning electronic storage media to third parties for repair?

Ensuring the media is not labeled in any way that indicates the organization's name.

Disassembling the media and removing parts that may contain sensitive datA.

Physically breaking parts of the media that may contain sensitive datA.

Establishing a contract with the third party regarding the secure handling of the mediA.

Show Answer Comment (0)

Total 1.482 questions

16 17 18 19 20

Go to page: of 149

ISC CISSP Practice Test - Questions Answers, Page 18

Question list

List of questions

Question 171

(0)

Question 172

(0)

Question 173

(0)

Question 174

(0)

Question 175

(0)

Question 176

(0)

Question 177

(0)

Question 178

(0)

Question 179

(0)

Question 180

(0)

Related questions

Question