Home / ISC / CISSP / List of questions

Ask Question

ISC CISSP Practice Test - Questions Answers, Page 26

List of questions

Question 251

Which item below is a federated identity standard?

802.11i

Kerberos

Lightweight Directory Access Protocol (LDAP)

Security Assertion Markup Language (SAML)

Show Answer Comment (0)

Suggested answer: D

asked 18/09/2024

Dominique Reemer

43 questions

Question 252

What is a common challenge when implementing Security Assertion Markup Language (SAML) for identity integration between on-premise environment and an external identity provider service?

Some users are not provisioned into the service.

SAML tokens are provided by the on-premise identity provider.

Single users cannot be revoked from the service.

SAML tokens contain user information.

Show Answer Comment (0)

Question 253

Refer to the information below to answer the question.

A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a child that uses the computer to send and receive email, search the web, and use instant messaging. The organization's Information Technology (IT) department discovers that a peer-to-peer program has been installed on the computer using the employee's access.

Which of the following could have MOST likely prevented the Peer-to-Peer (P2P) program from being installed on the computer?

Removing employee's full access to the computer

Supervising their child's use of the computer

Limiting computer's access to only the employee

Ensuring employee understands their business conduct guidelines

Show Answer Comment (0)

Question 254

Refer to the information below to answer the question.

Which of the following solutions would have MOST likely detected the use of peer-to-peer programs when the computer was connected to the office network?

Anti-virus software

Intrusion Prevention System (IPS)

Anti-spyware software

Integrity checking software

Show Answer Comment (0)

Question 255

Refer to the information below to answer the question.

Which of the following methods is the MOST effective way of removing the Peer-to-Peer (P2P) program from the computer?

Run software uninstall

Re-image the computer

Find and remove all installation files

Delete all cookies stored in the web browser cache

Show Answer Comment (0)

Question 256

Refer to the information below to answer the question.

Which of the following documents explains the proper use of the organization's assets?

Human resources policy

Acceptable use policy

Code of ethics

Access control policy

Show Answer Comment (0)

Question 257

Refer to the information below to answer the question.

A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.

In the plan, what is the BEST approach to mitigate future internal client-based attacks?

Block all client side web exploits at the perimeter.

Remove all non-essential client-side web services from the network.

Screen for harmful exploits of client-side services before implementation.

Harden the client image before deployment.

Show Answer Comment (0)

Suggested answer: D

asked 18/09/2024

Brian Charlton,

46 questions

Question 258

Refer to the information below to answer the question.

A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.

In addition to web browsers, what PRIMARY areas need to be addressed concerning mobile code used for malicious purposes?

Text editors, database, and Internet phone applications

Email, presentation, and database applications

Image libraries, presentation and spreadsheet applications

Email, media players, and instant messaging applications

Show Answer Comment (0)

Suggested answer: D

asked 18/09/2024

Talal Elemam

54 questions

Question 259

Refer to the information below to answer the question.

A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.

What MUST the plan include in order to reduce client-side exploitation?

Approved web browsers

Network firewall procedures

Proxy configuration

Employee education

Show Answer Comment (0)

Suggested answer: D

asked 18/09/2024

shylashri selvamani

50 questions

Question 260

Refer to the information below to answer the question.

A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.

What is the BEST reason for the organization to pursue a plan to mitigate client-based attacks?

Client privilege administration is inherently weaker than server privilege administration.

Client hardening and management is easier on clients than on servers.

Client-based attacks are more common and easier to exploit than server and network based attacks.

Client-based attacks have higher financial impact.

Show Answer Comment (0)

Question

Case Study

Question 251 (0)

Which item below is a federated identity standard?

Question 252 (0)

What is a common challenge when implementing Security Assertion Markup Language (SAML) for identity integration between on-premise environment and an external identity provider service?

Question 253 (0)

Refer to the information below to answer the question. A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a ch

Question 254 (0)

Refer to the information below to answer the question. A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a ch

Question 255 (0)

Refer to the information below to answer the question. A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a ch

Question 256 (0)

Refer to the information below to answer the question. A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a ch

Question 257 (0)

Refer to the information below to answer the question. A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns. In th

Question 258 (0)

Refer to the information below to answer the question. A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns. In ad

Question 259 (0)

Refer to the information below to answer the question. A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns. What

Question 260 (0)

Refer to the information below to answer the question. A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns. What

Export

with questions and answers will be exported as:

VPLUS file

PDF file (Demo 30 questions)

Highest scored 'comment-votes'

Your question list is being generated. We”ll email you once it’s ready.

If you didn't receive an email within 5 minutes, you should submit a support request to [email protected].