Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 22

Question list

List of questions

Question 211

(0)

If an attacker in a SYN flood attack uses someone else's valid host address as the source address, the system under attack will send a large number of Synchronize/Acknowledge (SYN/ACK) packets to th

Question 212

(0)

According to best practice, which of the following is required when implementing third party software in a production environment?

Question 213

(0)

Which of the following is the BEST solution to provide redundancy for telecommunications links?

Question 214

(0)

The amount of data that will be collected during an audit is PRIMARILY determined by the.

Question 215

(0)

Which of the following are required components for implementing software configuration management systems?

Question 216

(0)

For a service provider, which of the following MOST effectively addresses confidentiality concerns for customers using cloud computing?

Question 217

(0)

Which of the following BEST mitigates a replay attack against a system using identity federation and Security Assertion Markup Language (SAML) implementation?

Question 218

(0)

What is the BEST method to detect the most common improper initialization problems in programming languages?

Question 219

(0)

During the procurement of a new information system, it was determined that some of the security requirements were not addressed in the system specification. Which of the following is the MOST likely

Question 220

(0)

Which of the following is required to determine classification and ownership?

Question 211

If an attacker in a SYN flood attack uses someone else's valid host address as the source address, the system under attack will send a large number of Synchronize/Acknowledge (SYN/ACK) packets to the

default gateway.

attacker's address.

local interface being attacked.

specified source address.

Show Answer Comment (0)

Question 212

According to best practice, which of the following is required when implementing third party software in a production environment?

Scan the application for vulnerabilities

Contract the vendor for patching

Negotiate end user application training

Escrow a copy of the software

Show Answer Comment (0)

Question 213

Which of the following is the BEST solution to provide redundancy for telecommunications links?

Provide multiple links from the same telecommunications vendor.

Ensure that the telecommunications links connect to the network in one location.

Ensure that the telecommunications links connect to the network in multiple locations.

Provide multiple links from multiple telecommunications vendors.

Show Answer Comment (0)

Question 214

The amount of data that will be collected during an audit is PRIMARILY determined by the.

audit scope.

auditor's experience level.

availability of the data.

integrity of the data.

Show Answer Comment (0)

Question 215

Which of the following are required components for implementing software configuration management systems?

Audit control and signoff

User training and acceptance

Rollback and recovery processes

Regression testing and evaluation

Show Answer Comment (0)

Question 216

For a service provider, which of the following MOST effectively addresses confidentiality concerns for customers using cloud computing?

Hash functions

Data segregation

File system permissions

Non-repudiation controls

Show Answer Comment (0)

Question 217

Which of the following BEST mitigates a replay attack against a system using identity federation and Security Assertion Markup Language (SAML) implementation?

Two-factor authentication

Digital certificates and hardware tokens

Timed sessions and Secure Socket Layer (SSL)

Passwords with alpha-numeric and special characters

Show Answer Comment (0)

Question 218

What is the BEST method to detect the most common improper initialization problems in programming languages?

Use and specify a strong character encoding.

Use automated static analysis tools that target this type of weakness.

Perform input validation on any numeric inputs by assuring that they are within the expected range.

Use data flow analysis to minimize the number of false positives.

Show Answer Comment (0)

During the procurement of a new information system, it was determined that some of the security requirements were not addressed in the system specification. Which of the following is the MOST likely reason for this?

The procurement officer lacks technical knowledge.

The security requirements have changed during the procurement process.

There were no security professionals in the vendor's bidding team.

The description of the security requirements was insufficient.

Show Answer Comment (0)