Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 23

Question list

List of questions

Question 221

(0)

A large university needs to enable student access to university resources from their homes. Which of the following provides the BEST option for low maintenance and ease of deployment?

Question 222

(0)

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

Question 223

(0)

A system is developed so that its business users can perform business functions but not user administration functions. Application administrators can perform administration functions but not user bu

Question 224

(0)

What is the MOST effective method for gaining unauthorized access to a file protected with a long complex password?

Question 225

(0)

A security manager has noticed an inconsistent application of server security controls resulting in vulnerabilities on critical systems. What is the MOST likely cause of this issue?

Question 226

(0)

Which of the following is the BEST countermeasure to brute force login attacks?

Question 227

(0)

A Business Continuity Plan (BCP) is based on

Question 228

(0)

When implementing a secure wireless network, which of the following supports authentication and authorization for individual client endpoints?

Question 229

(0)

A thorough review of an organization's audit logs finds that a disgruntled network administrator has intercepted emails meant for the Chief Executive Officer (CEO) and changed them before forwarding

Question 230

(0)

Which of the following is the MOST effective attack against cryptographic hardware modules?

Question 221

A large university needs to enable student access to university resources from their homes. Which of the following provides the BEST option for low maintenance and ease of deployment?

Provide students with Internet Protocol Security (IPSec) Virtual Private Network (VPN) client software.

Use Secure Sockets Layer (SSL) VPN technology.

Use Secure Shell (SSH) with public/private keys.

Require students to purchase home router capable of VPN.

Show Answer Comment (0)

Question 222

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

The inherent risk is greater than the residual risk.

The Annualized Loss Expectancy (ALE) approaches zero.

The expected loss from the risk exceeds mitigation costs.

The infrastructure budget can easily cover the upgrade costs.

Show Answer Comment (0)

A system is developed so that its business users can perform business functions but not user administration functions. Application administrators can perform administration functions but not user business functions. These capabilities are

BEST described as

least privilege.

rule based access controls.

Mandatory Access Control (MAC).

separation of duties.

Show Answer Comment (0)

Question 224

What is the MOST effective method for gaining unauthorized access to a file protected with a long complex password?

Brute force attack

Frequency analysis

Social engineering

Dictionary attack

Show Answer Comment (0)

Question 225

A security manager has noticed an inconsistent application of server security controls resulting in vulnerabilities on critical systems. What is the MOST likely cause of this issue?

A lack of baseline standards

Improper documentation of security guidelines

A poorly designed security policy communication program

Host-based Intrusion Prevention System (HIPS) policies are ineffective

Show Answer Comment (0)

Question 226

Which of the following is the BEST countermeasure to brute force login attacks?

Changing all canonical passwords

Decreasing the number of concurrent user sessions

Restricting initial password delivery only in person

Introducing a delay after failed system access attempts

Show Answer Comment (0)

Question 227

A Business Continuity Plan (BCP) is based on

the policy and procedures manual.

an existing BCP from a similar organization.

a review of the business processes and procedures.

a standard checklist of required items and objectives.

Show Answer Comment (0)

Question 228

When implementing a secure wireless network, which of the following supports authentication and authorization for individual client endpoints?

Temporal Key Integrity Protocol (TKIP)

Wi-Fi Protected Access (WPA) Pre-Shared Key (PSK)

Wi-Fi Protected Access 2 (WPA2) Enterprise

Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP)

Show Answer Comment (0)

Question 229

A thorough review of an organization's audit logs finds that a disgruntled network administrator has intercepted emails meant for the Chief Executive Officer (CEO) and changed them before forwarding them to their intended recipient. What type of attack has MOST likely occurred?

Spoofing

Eavesdropping

Man-in-the-middle

Denial of service

Show Answer Comment (0)