Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 50

Question list

List of questions

Question 491

(0)

Which of the following sets of controls should allow an investigation if an attack is not blocked by preventive controls or detected by monitoring?

Question 492

(0)

Determining outage costs caused by a disaster can BEST be measured by the

Question 493

(0)

Which of the following is considered a secure coding practice?

Question 494

(0)

As part of the security assessment plan, the security professional has been asked to use a negative testing strategy on a new website. Which of the following actions would be performed?

Question 495

(0)

Who has the PRIMARY responsibility to ensure that security objectives are aligned with organization goals?

Question 496

(0)

Which of the following alarm systems is recommended to detect intrusions through windows in a high-noise, occupied environment?

Question 497

(0)

Which of the following is the MOST effective practice in managing user accounts when an employee is terminated?

Question 498

(0)

Which of the following is the MOST important part of an awareness and training plan to prepare employees for emergency situations?

Question 499

(0)

What is the process of removing sensitive data from a system or storage device with the intent that the data cannot be reconstructed by any known technique?

Question 500

(0)

The security accreditation task of the System Development Life Cycle (SDLC) process is completed at the end of which phase?

Question 491

Which of the following sets of controls should allow an investigation if an attack is not blocked by preventive controls or detected by monitoring?

Logging and audit trail controls to enable forensic analysis

Security incident response lessons learned procedures

Security event alert triage done by analysts using a Security Information and Event Management (SIEM) system

Transactional controls focused on fraud prevention

Show Answer Comment (0)

Question 492

Determining outage costs caused by a disaster can BEST be measured by the

cost of redundant systems and backups.

cost to recover from an outage.

overall long-term impact of the outage.

revenue lost during the outage.

Show Answer Comment (0)

Question 493

Which of the following is considered a secure coding practice?

Use concurrent access for shared variables and resources

Use checksums to verify the integrity of libraries

Use new code for common tasks

Use dynamic execution functions to pass user supplied data

Show Answer Comment (0)

Question 494

As part of the security assessment plan, the security professional has been asked to use a negative testing strategy on a new website. Which of the following actions would be performed?

Use a web scanner to scan for vulnerabilities within the website.

Perform a code review to ensure that the database references are properly addressed.

Establish a secure connection to the web server to validate that only the approved ports are open.

Enter only numbers in the web form and verify that the website prompts the user to enter a valid input.

Show Answer Comment (0)

Question 495

Who has the PRIMARY responsibility to ensure that security objectives are aligned with organization goals?

Senior management

Information security department

Audit committee

All users

Show Answer Comment (0)

Question 496

Which of the following alarm systems is recommended to detect intrusions through windows in a high-noise, occupied environment?

Acoustic sensor

Motion sensor

Shock sensor

Photoelectric sensor

Show Answer Comment (0)

Question 497

Which of the following is the MOST effective practice in managing user accounts when an employee is terminated?

Implement processes for automated removal of access for terminated employees.

Delete employee network and system IDs upon termination.

Manually remove terminated employee user-access to all systems and applications.

Disable terminated employee network ID to remove all access.

Show Answer Comment (0)

Question 498

Which of the following is the MOST important part of an awareness and training plan to prepare employees for emergency situations?

Having emergency contacts established for the general employee population to get information

Conducting business continuity and disaster recovery training for those who have a direct role in the recovery

Designing business continuity and disaster recovery training programs for different audiences

Publishing a corporate business continuity and disaster recovery plan on the corporate website

Show Answer Comment (0)

Question 499

What is the process of removing sensitive data from a system or storage device with the intent that the data cannot be reconstructed by any known technique?

Purging

Encryption

Destruction

Clearing

Show Answer Comment (0)