Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 48

Question list

List of questions

Question 471

(0)

A company was ranked as high in the following National Institute of Standards and Technology (NIST) functions: Protect, Detect, Respond and Recover. However, a low maturity grade was attributed to t

Question 472

(0)

What is the difference between media marking and media labeling?

Question 473

(0)

What balance MUST be considered when web application developers determine how informative application error messages should be constructed?

Question 474

(0)

What operations role is responsible for protecting the enterprise from corrupt or contaminated media?

Question 475

(0)

Which of the following is a characteristic of the initialization vector when using Data Encryption Standard (DES)?

Question 476

(0)

In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

Question 477

(0)

Network-based logging has which advantage over host-based logging when reviewing malicious activity about a victim machine?

Question 478

(0)

Which of the following is the PRIMARY reason for employing physical security personnel at entry points in facilities where card access is in operation?

Question 479

(0)

Between which pair of Open System Interconnection (OSI) Reference Model layers are routers used as a communications device?

Question 480

(0)

Which type of security testing is being performed when an ethical hacker has no knowledge about the target system but the testing target is notified before the test?

Question 471

A company was ranked as high in the following National Institute of Standards and Technology (NIST) functions: Protect, Detect, Respond and Recover. However, a low maturity grade was attributed to the Identify function. In which of the following the controls categories does this company need to improve when analyzing its processes individually?

Asset Management, Business Environment, Governance and Risk Assessment

Access Control, Awareness and Training, Data Security and Maintenance

Anomalies and Events, Security Continuous Monitoring and Detection Processes

Recovery Planning, Improvements and Communications

Show Answer Comment (0)

Question 472

What is the difference between media marking and media labeling?

Media marking refers to the use of human-readable security attributes, while media labeling refers to the use of security attributes in internal data structures.

Media labeling refers to the use of human-readable security attributes, while media marking refers to the use of security attributes in internal data structures.

Media labeling refers to security attributes required by public policy/law, while media marking refers to security required by internal organizational policy.

Media marking refers to security attributes required by public policy/law, while media labeling refers to security attributes required by internal organizational policy.

Show Answer Comment (0)

Question 473

What balance MUST be considered when web application developers determine how informative application error messages should be constructed?

Risk versus benefit

Availability versus auditability

Confidentiality versus integrity

Performance versus user satisfaction

Show Answer Comment (0)

Question 474

What operations role is responsible for protecting the enterprise from corrupt or contaminated media?

Information security practitioner

Information librarian

Computer operator

Network administrator

Show Answer Comment (0)

Question 475

Which of the following is a characteristic of the initialization vector when using Data Encryption Standard (DES)?

It must be known to both sender and receiver.

It can be transmitted in the clear as a random number.

It must be retained until the last block is transmitted.

It can be used to encrypt and decrypt information.

Show Answer Comment (0)

Question 476

In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

Reduced risk to internal systems.

Prepare the server for potential attacks.

Mitigate the risk associated with the exposed server.

Bypass the need for a firewall.

Show Answer Comment (0)

Question 477

Network-based logging has which advantage over host-based logging when reviewing malicious activity about a victim machine?

Addresses and protocols of network-based logs are analyzed.

Host-based system logging has files stored in multiple locations.

Properly handled network-based logs may be more reliable and valid.

Network-based systems cannot capture users logging into the console.

Show Answer Comment (0)

Question 478

Which of the following is the PRIMARY reason for employing physical security personnel at entry points in facilities where card access is in operation?

To verify that only employees have access to the facility.

To identify present hazards requiring remediation.

To monitor staff movement throughout the facility.

To provide a safe environment for employees.

Show Answer Comment (0)

Question 479

Between which pair of Open System Interconnection (OSI) Reference Model layers are routers used as a communications device?

Transport and Session

Data-Link and Transport

Network and Session

Physical and Data-Link

Show Answer Comment (0)

Question 480

Which type of security testing is being performed when an ethical hacker has no knowledge about the target system but the testing target is notified before the test?

Reversal

Gray box

Blind

White box

Show Answer Comment (0)

Total 1.482 questions