Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 46

Question list

List of questions

Question 451

(0)

What is the MOST important element when considering the effectiveness of a training program for Business Continuity (BC) and Disaster Recovery (DR)?

Question 452

(0)

A database administrator is asked by a high-ranking member of management to perform specific changes to the accounting system database. The administrator is specifically instructed to not track or e

Question 453

(0)

Which of the following is the MOST important goal of information asset valuation?

Question 454

(0)

Which of the following is a strategy of grouping requirements in developing a Security Test and Evaluation (ST&E)?

Question 455

(0)

Which one of the following activities would present a significant security risk to organizations when employing a Virtual Private Network (VPN) solution?

Question 456

(0)

Which of the following BEST describes a chosen plaintext attack?

Question 457

(0)

For network based evidence, which of the following contains traffic details of all network sessions in order to detect anomalies?

Question 458

(0)

Which of the following is the PRIMARY reason to perform regular vulnerability scanning of an organization network?

Question 459

(0)

Which of the following would BEST describe the role directly responsible for data within an organization?

Question 460

(0)

The restoration priorities of a Disaster Recovery Plan (DRP) are based on which of the following documents?

Question 451

What is the MOST important element when considering the effectiveness of a training program for Business Continuity (BC) and Disaster Recovery (DR)?

Management support

Consideration of organizational need

Technology used for delivery

Target audience

Show Answer Comment (0)

A database administrator is asked by a high-ranking member of management to perform specific changes to the accounting system database. The administrator is specifically instructed to not track or evidence the change in a ticket. Which of the following is the BEST course of action?

Ignore the request and do not perform the change.

Perform the change as requested, and rely on the next audit to detect and report the situation.

Perform the change, but create a change ticket regardless to ensure there is complete traceability.

Inform the audit committee or internal audit directly using the corporate whistleblower process.

Show Answer Comment (0)

Question 453

Which of the following is the MOST important goal of information asset valuation?

Developing a consistent and uniform method of controlling access on information assets

Developing appropriate access control policies and guidelines

Assigning a financial value to an organization's information assets

Determining the appropriate level of protection

Show Answer Comment (0)

Question 454

Which of the following is a strategy of grouping requirements in developing a Security Test and Evaluation (ST&E)?

Tactical, strategic, and financial

Management, operational, and technical

Documentation, observation, and manual

Standards, policies, and procedures

Show Answer Comment (0)

Question 455

Which one of the following activities would present a significant security risk to organizations when employing a Virtual Private Network (VPN) solution?

VPN bandwidth

Simultaneous connection to other networks

Users with Internet Protocol (IP) addressing conflicts

Remote users with administrative rights

Show Answer Comment (0)