Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

Which one of the following affects the classification of data?

Question 12

(0)

Which of the following BEST describes the responsibilities of a data owner?

Question 13

(0)

An organization has doubled in size due to a rapid market share increase. The size of the Information Technology (IT) staff has maintained pace with this growth. The organization hires several contr

Question 14

(0)

When implementing a data classification program, why is it important to avoid too much granularity?

Question 15

(0)

In a data classification scheme, the data is owned by the

Question 16

(0)

Which of the following is an initial consideration when developing an information security management system?

Question 17

(0)

Which of the following is an effective control in preventing electronic cloning of Radio Frequency Identification (RFID) based access cards?

Question 18

(0)

Which security service is served by the process of encryption plaintext with the sender's private key and decrypting cipher text with the sender's public key?

Question 19

(0)

Which of the following mobile code security models relies only on trust?

Question 20

(0)

Which technique can be used to make an encryption scheme more resistant to a known plaintext attack?

Question 11

Which one of the following affects the classification of data?

Assigned security label

Multilevel Security (MLS) architecture

Minimum query size

Passage of time

Show Answer Comment (0)

Question 12

Which of the following BEST describes the responsibilities of a data owner?

Ensuring quality and validation through periodic audits for ongoing data integrity

Maintaining fundamental data availability, including data storage and archiving

Ensuring accessibility to appropriate users, maintaining appropriate levels of data security

Determining the impact the information has on the mission of the organization

Show Answer Comment (0)

An organization has doubled in size due to a rapid market share increase. The size of the Information Technology (IT) staff has maintained pace with this growth. The organization hires several contractors whose onsite time is limited. The

IT department has pushed its limits building servers and rolling out workstations and has a backlog of account management requests.

Which contract is BEST in offloading the task from the IT staff?

Platform as a Service (PaaS)

Identity as a Service (IDaaS)

Desktop as a Service (DaaS)

Software as a Service (SaaS)

Show Answer Comment (0)

Question 14

When implementing a data classification program, why is it important to avoid too much granularity?

The process will require too many resources

It will be difficult to apply to both hardware and software

It will be difficult to assign ownership to the data

The process will be perceived as having value

Show Answer Comment (0)

Question 15

In a data classification scheme, the data is owned by the

system security managers

business managers

Information Technology (IT) managers

end users

Show Answer Comment (0)

Question 16

Which of the following is an initial consideration when developing an information security management system?

Identify the contractual security obligations that apply to the organizations

Understand the value of the information assets

Identify the level of residual risk that is tolerable to management

Identify relevant legislative and regulatory compliance requirements

Show Answer Comment (0)

Question 17

Which of the following is an effective control in preventing electronic cloning of Radio Frequency Identification (RFID) based access cards?

Personal Identity Verification (PIV)

Cardholder Unique Identifier (CHUID) authentication

Physical Access Control System (PACS) repeated attempt detection

Asymmetric Card Authentication Key (CAK) challenge-response

Show Answer Comment (0)

Question 18

Which security service is served by the process of encryption plaintext with the sender's private key and decrypting cipher text with the sender's public key?

Confidentiality

Integrity

Identification

Availability

Show Answer Comment (0)