Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 36

Question list

List of questions

Question 351

(0)

While investigating a malicious event, only six days of audit logs from the last month were available. What policy should be updated to address this problem?

Question 352

(0)

Who is ultimately responsible to ensure that information assets are categorized and adequate measures are taken to protect them?

Question 353

(0)

A mobile device application that restricts the storage of user information to just that which is needed to accomplish lawful business goals adheres to what privacy principle?

Question 354

(0)

Which of the following is the PRIMARY benefit of implementing data-in-use controls?

Question 355

(0)

A health care provider is considering Internet access for their employees and patients. Which of the following is the organization's MOST secure solution for protection of data?

Question 356

(0)

Which of the following BEST describes the purpose of the security functional requirements of Common Criteria?

Question 357

(0)

Application of which of the following Institute of Electrical and Electronics Engineers (IEEE) standards will prevent an unauthorized wireless device from being attached to a network?

Question 358

(0)

The PRIMARY security concern for handheld devices is the

Question 359

(0)

Which of the following is the BIGGEST weakness when using native Lightweight Directory Access Protocol (LDAP) for authentication?

Question 360

(0)

A global organization wants to implement hardware tokens as part of a multifactor authentication solution for remote access. The PRIMARY advantage of this implementation is

Question 351

While investigating a malicious event, only six days of audit logs from the last month were available.

What policy should be updated to address this problem?

Retention

Reporting

Recovery

Remediation

Show Answer Comment (0)

Question 352

Who is ultimately responsible to ensure that information assets are categorized and adequate measures are taken to protect them?

Data Custodian

Executive Management

Chief Information Security Officer

Data/Information/Business Owners

Show Answer Comment (0)

Question 353

A mobile device application that restricts the storage of user information to just that which is needed to accomplish lawful business goals adheres to what privacy principle?

Onward transfer

Collection Limitation

Collector Accountability

Individual Participation

Show Answer Comment (0)

Question 354

Which of the following is the PRIMARY benefit of implementing data-in-use controls?

If the data is lost, it must be decrypted to be opened.

If the data is lost, it will not be accessible to unauthorized users.

When the data is being viewed, it can only be printed by authorized users.

When the data is being viewed, it must be accessed using secure protocols.

Show Answer Comment (0)

Question 355

A health care provider is considering Internet access for their employees and patients. Which of the following is the organization's MOST secure solution for protection of data?

Public Key Infrastructure (PKI) and digital signatures

Trusted server certificates and passphrases

User ID and password

Asymmetric encryption and User ID

Show Answer Comment (0)

Question 356

Which of the following BEST describes the purpose of the security functional requirements of Common Criteria?

Level of assurance of the Target of Evaluation (TOE) in intended operational environment

Selection to meet the security objectives stated in test documents

Security behavior expected of a TOE

Definition of the roles and responsibilities

Show Answer Comment (0)

Question 357

Application of which of the following Institute of Electrical and Electronics Engineers (IEEE) standards will prevent an unauthorized wireless device from being attached to a network?

IEEE 802.1F

IEEE 802.1H

IEEE 802.1Q

IEEE 802.1X

Show Answer Comment (0)

Question 358

The PRIMARY security concern for handheld devices is the

strength of the encryption algorithm.

spread of malware during synchronization.

ability to bypass the authentication mechanism.

strength of the Personal Identification Number (PIN).

Show Answer Comment (0)

Question 359

Which of the following is the BIGGEST weakness when using native Lightweight Directory Access Protocol (LDAP) for authentication?

Authorizations are not included in the server response

Unsalted hashes are passed over the network

The authentication session can be replayed

Passwords are passed in cleartext

Show Answer Comment (0)

Question 360

A global organization wants to implement hardware tokens as part of a multifactor authentication solution for remote access. The PRIMARY advantage of this implementation is

the scalability of token enrollment.

increased accountability of end users.

it protects against unauthorized access.

it simplifies user access administration.

Show Answer Comment (0)

Total 1.482 questions