Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

An input validation and exception handling vulnerability has been discovered on a critical web-based system. Which of the following is MOST suited to quickly implement a control?

Question 32

(0)

Which of the following is the BEST network defense against unknown types of attacks or stealth attacks in progress?

Question 33

(0)

Which of the following factors contributes to the weakness of Wired Equivalent Privacy (WEP) protocol?

Question 34

(0)

A manufacturing organization wants to establish a Federated Identity Management (FIM) system with its 20 different supplier companies. Which of the following is the BEST solution for the manufacturi

Question 35

(0)

Which of the following BEST describes an access control method utilizing cryptographic keys derived from a smart card private key that is embedded within mobile devices?

Question 36

(0)

Users require access rights that allow them to view the average salary of groups of employees. Which control would prevent the users from obtaining an individual employee's salary?

Question 37

(0)

What is the BEST approach for controlling access to highly sensitive information when employees have the same level of security clearance?

Question 38

(0)

Which of the following is of GREATEST assistance to auditors when reviewing system configurations?

Question 39

(0)

In which of the following programs is it MOST important to include the collection of security process data?

Question 40

(0)

A Virtual Machine (VM) environment has five guest Operating Systems (OS) and provides strong isolation. What MUST an administrator review to audit a user's access to data files?

Question 31

An input validation and exception handling vulnerability has been discovered on a critical web-based system. Which of the following is MOST suited to quickly implement a control?

Add a new rule to the application layer firewall

Block access to the service

Install an Intrusion Detection System (IDS)

Patch the application source code

Show Answer Comment (0)

Question 32

Which of the following is the BEST network defense against unknown types of attacks or stealth attacks in progress?

Intrusion Prevention Systems (IPS)

Intrusion Detection Systems (IDS)

Stateful firewalls

Network Behavior Analysis (NBA) tools

Show Answer Comment (0)

Question 33

Which of the following factors contributes to the weakness of Wired Equivalent Privacy (WEP) protocol?

WEP uses a small range Initialization Vector (IV)

WEP uses Message Digest 5 (MD5)

WEP uses Diffie-Hellman

WEP does not use any Initialization Vector (IV)

Show Answer Comment (0)

A manufacturing organization wants to establish a Federated Identity Management (FIM) system with its 20 different supplier companies. Which of the following is the BEST solution for the manufacturing organization?

Trusted third-party certification

Lightweight Directory Access Protocol (LDAP)

Security Assertion Markup language (SAML)

Cross-certification

Show Answer Comment (0)

Question 35

Which of the following BEST describes an access control method utilizing cryptographic keys derived from a smart card private key that is embedded within mobile devices?

Derived credential

Temporary security credential

Mobile device credentialing service

Digest authentication

Show Answer Comment (0)

Question 36

Users require access rights that allow them to view the average salary of groups of employees.

Which control would prevent the users from obtaining an individual employee's salary?

Limit access to predefined queries

Segregate the database into a small number of partitions each with a separate security level

Implement Role Based Access Control (RBAC)

Reduce the number of people who have access to the system for statistical purposes

Show Answer Comment (0)

Question 37

What is the BEST approach for controlling access to highly sensitive information when employees have the same level of security clearance?

Audit logs

Role-Based Access Control (RBAC)

Two-factor authentication

Application of least privilege

Show Answer Comment (0)

Question 38

Which of the following is of GREATEST assistance to auditors when reviewing system configurations?

Change management processes

User administration procedures

Operating System (OS) baselines

System backup documentation

Show Answer Comment (0)

Question 39

In which of the following programs is it MOST important to include the collection of security process data?

Quarterly access reviews

Security continuous monitoring

Business continuity testing

Annual security training

Show Answer Comment (0)

Question 40

A Virtual Machine (VM) environment has five guest Operating Systems (OS) and provides strong isolation. What MUST an administrator review to audit a user's access to data files?

Host VM monitor audit logs

Guest OS access controls

Host VM access controls

Guest OS audit logs

Show Answer Comment (0)

Total 1.482 questions