Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 43

Question list

List of questions

Question 421

(0)

Backup information that is critical to the organization is identified through a

Question 422

(0)

When using Generic Routing Encapsulation (GRE) tunneling over Internet Protocol version 4 (IPv4), where is the GRE header inserted?

Question 423

(0)

An application developer is deciding on the amount of idle session time that the application allows before a timeout. The BEST reason for determining the session timeout requirement is

Question 424

(0)

Knowing the language in which an encrypted message was originally produced might help a cryptanalyst to perform a

Question 425

(0)

During the Security Assessment and Authorization process, what is the PRIMARY purpose for conducting a hardware and software inventory?

Question 426

(0)

When evaluating third-party applications, which of the following is the GREATEST responsibility of Information Security?

Question 427

(0)

An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the

Question 428

(0)

The goal of a Business Impact Analysis (BIA) is to determine which of the following?

Question 429

(0)

What does the Maximum Tolerable Downtime (MTD) determine?

Question 430

(0)

What is a characteristic of Secure Socket Layer (SSL) and Transport Layer Security (TLS)?

Question 421

Backup information that is critical to the organization is identified through a

Vulnerability Assessment (VA).

Business Continuity Plan (BCP).

Business Impact Analysis (BIA).

data recovery analysis.

Show Answer Comment (0)

Question 422

When using Generic Routing Encapsulation (GRE) tunneling over Internet Protocol version 4 (IPv4), where is the GRE header inserted?

Into the options field

Between the delivery header and payload

Between the source and destination addresses

Into the destination address

Show Answer Comment (0)

Question 423

An application developer is deciding on the amount of idle session time that the application allows before a timeout. The BEST reason for determining the session timeout requirement is

organization policy.

industry best practices.

industry laws and regulations.

management feedback.

Show Answer Comment (0)

Question 424

Knowing the language in which an encrypted message was originally produced might help a cryptanalyst to perform a

clear-text attack.

known cipher attack.

frequency analysis.

stochastic assessment.

Show Answer Comment (0)

Question 425

During the Security Assessment and Authorization process, what is the PRIMARY purpose for conducting a hardware and software inventory?

Calculate the value of assets being accredited.

Create a list to include in the Security Assessment and Authorization package.

Identify obsolete hardware and software.

Define the boundaries of the information system.

Show Answer Comment (0)

Question 426

When evaluating third-party applications, which of the following is the GREATEST responsibility of Information Security?

Accept the risk on behalf of the organization.

Report findings to the business to determine security gaps.

Quantify the risk to the business for product selection.

Approve the application that best meets security requirements.

Show Answer Comment (0)

Question 427

An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team.

Which of the following is the BEST action to take?

Revoke access temporarily.

Block user access and delete user account after six months.

Block access to the offices immediately.

Monitor account usage temporarily.

Show Answer Comment (0)