Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 51

Question list

List of questions

Question 501

(0)

Which of the following is the BEST reason for the use of security metrics?

Question 502

(0)

Which of the following is a benefit in implementing an enterprise Identity and Access Management (IAM) solution?

Question 503

(0)

A control to protect from a Denial-of-Service (DoS) attach has been determined to stop 50% of attacks, and additionally reduces the impact of an attack by 50%. What is the residual risk?

Question 504

(0)

Which of the following entails identification of data and links to business processes, applications, and data stores as well as assignment of ownership responsibilities?

Question 505

(0)

Which of the following mandates the amount and complexity of security controls applied to a security risk?

Question 506

(0)

When determining who can accept the risk associated with a vulnerability, which of the following is MOST important?

Question 507

(0)

A security professional determines that a number of outsourcing contracts inherited from a previous merger do not adhere to the current security requirements. Which of the following BEST minimizes t

Question 508

(0)

Which of the following is a direct monetary cost of a security incident?

Question 509

(0)

Which of the following would MINIMIZE the ability of an attacker to exploit a buffer overflow?

Question 510

(0)

Which of the following mechanisms will BEST prevent a Cross-Site Request Forgery (CSRF) attack?

Question 501

Which of the following is the BEST reason for the use of security metrics?

They ensure that the organization meets its security objectives.

They provide an appropriate framework for Information Technology (IT) governance.

They speed up the process of quantitative risk assessment.

They quantify the effectiveness of security processes.

Show Answer Comment (0)

Question 502

Which of the following is a benefit in implementing an enterprise Identity and Access Management (IAM) solution?

Password requirements are simplified.

Risk associated with orphan accounts is reduced.

Segregation of duties is automatically enforced.

Data confidentiality is increased.

Show Answer Comment (0)

Question 503

A control to protect from a Denial-of-Service (DoS) attach has been determined to stop 50% of attacks, and additionally reduces the impact of an attack by 50%. What is the residual risk?

25%

50%

75%

100%

Show Answer Comment (0)

Question 504

Which of the following entails identification of data and links to business processes, applications, and data stores as well as assignment of ownership responsibilities?

Security governance

Risk management

Security portfolio management

Risk assessment

Show Answer Comment (0)

Question 505

Which of the following mandates the amount and complexity of security controls applied to a security risk?

Security vulnerabilities

Risk tolerance

Risk mitigation

Security staff

Show Answer Comment (0)

Question 506

When determining who can accept the risk associated with a vulnerability, which of the following is MOST important?

Countermeasure effectiveness

Type of potential loss

Incident likelihood

Information ownership

Show Answer Comment (0)

A security professional determines that a number of outsourcing contracts inherited from a previous merger do not adhere to the current security requirements. Which of the following BEST minimizes the risk of this happening again?

Define additional security controls directly after the merger

Include a procurement officer in the merger team

Verify all contracts before a merger occurs

Assign a compliancy officer to review the merger conditions

Show Answer Comment (0)