Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 21

Question list

List of questions

Question 201

(0)

With data labeling, which of the following MUST be the key decision maker?

Question 202

(0)

Which of the following is a critical factor for implementing a successful data classification program?

Question 203

(0)

An organization's data policy MUST include a data retention period which is based on

Question 204

(0)

What is the MOST important reason to configure unique user IDs?

Question 205

(0)

What is the PRIMARY advantage of using automated application security testing tools?

Question 206

(0)

When using third-party software developers, which of the following is the MOST effective method of providing software development Quality Assurance (QA)?

Question 207

(0)

What do Capability Maturity Models (CMM) serve as a benchmark for in an organization?

Question 208

(0)

Which of the following is the MOST crucial for a successful audit plan?

Question 209

(0)

An organization decides to implement a partial Public Key Infrastructure (PKI) with only the servers having digital certificates. What is the security benefit of this implementation?

Question 210

(0)

Which of the following is the PRIMARY benefit of a formalized information classification program?

Question 201

With data labeling, which of the following MUST be the key decision maker?

Information security

Departmental management

Data custodian

Data owner

Show Answer Comment (0)

Question 202

Which of the following is a critical factor for implementing a successful data classification program?

Executive sponsorship

Information security sponsorship

End-user acceptance

Internal audit acceptance

Show Answer Comment (0)

Question 203

An organization's data policy MUST include a data retention period which is based on

application dismissal.

business procedures.

digital certificates expiration.

regulatory compliance.

Show Answer Comment (0)

Question 204

What is the MOST important reason to configure unique user IDs?

Supporting accountability

Reducing authentication errors

Preventing password compromise

Supporting Single Sign On (SSO)

Show Answer Comment (0)

Question 205

What is the PRIMARY advantage of using automated application security testing tools?

The application can be protected in the production environment.

Large amounts of code can be tested using fewer resources.

The application will fail less when tested using these tools.

Detailed testing of code functions can be performed.

Show Answer Comment (0)

Question 206

When using third-party software developers, which of the following is the MOST effective method of providing software development Quality Assurance (QA)?

Retain intellectual property rights through contractual wording.

Perform overlapping code reviews by both parties.

Verify that the contractors attend development planning meetings.

Create a separate contractor development environment.

Show Answer Comment (0)

Question 207

What do Capability Maturity Models (CMM) serve as a benchmark for in an organization?

Experience in the industry

Definition of security profiles

Human resource planning efforts

Procedures in systems development

Show Answer Comment (0)

Question 208

Which of the following is the MOST crucial for a successful audit plan?

Defining the scope of the audit to be performed

Identifying the security controls to be implemented

Working with the system owner on new controls

Acquiring evidence of systems that are not compliant

Show Answer Comment (0)

Question 209

An organization decides to implement a partial Public Key Infrastructure (PKI) with only the servers having digital certificates. What is the security benefit of this implementation?

Clients can authenticate themselves to the servers.

Mutual authentication is available between the clients and servers.

Servers are able to issue digital certificates to the client.

Servers can authenticate themselves to the client.

Show Answer Comment (0)