Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

When is a Business Continuity Plan (BCP) considered to be valid?

Question 52

(0)

Recovery strategies of a Disaster Recovery planning (DRIP) MUST be aligned with which of the following?

Question 53

(0)

Which of the following is the FIRST step in the incident response process?

Question 54

(0)

A continuous information security monitoring program can BEST reduce risk through which of the following?

Question 55

(0)

What would be the MOST cost effective solution for a Disaster Recovery (DR) site given that the organization's systems cannot be unavailable for more than 24 hours?

Question 56

(0)

A Java program is being developed to read a file from computer A and write it to computer B, using a third computer C. The program is not working as expected. What is the MOST probable security feat

Question 57

(0)

Which of the following is the PRIMARY risk with using open source software in a commercial software construction?

Question 58

(0)

When in the Software Development Life Cycle (SDLC) MUST software security functional requirements be defined?

Question 59

(0)

Which of the following is the BEST method to prevent malware from being introduced into a production environment?

Question 60

(0)

The configuration management and control task of the certification and accreditation process is incorporated in which phase of the System Development Life Cycle (SDLC)?

Question 51

When is a Business Continuity Plan (BCP) considered to be valid?

When it has been validated by the Business Continuity (BC) manager

When it has been validated by the board of directors

When it has been validated by all threat scenarios

When it has been validated by realistic exercises

Show Answer Comment (0)

Question 52

Recovery strategies of a Disaster Recovery planning (DRIP) MUST be aligned with which of the following?

Hardware and software compatibility issues

Applications' critically and downtime tolerance

Budget constraints and requirements

Cost/benefit analysis and business objectives

Show Answer Comment (0)

Question 53

Which of the following is the FIRST step in the incident response process?

Determine the cause of the incident

Disconnect the system involved from the network

Isolate and contain the system involved

Investigate all symptoms to confirm the incident

Show Answer Comment (0)

Question 54

A continuous information security monitoring program can BEST reduce risk through which of the following?

Collecting security events and correlating them to identify anomalies

Facilitating system-wide visibility into the activities of critical user accounts

Encompassing people, process, and technology

Logging both scheduled and unscheduled system changes

Show Answer Comment (0)

Question 55

What would be the MOST cost effective solution for a Disaster Recovery (DR) site given that the organization's systems cannot be unavailable for more than 24 hours?

Warm site

Hot site

Mirror site

Cold site

Show Answer Comment (0)

A Java program is being developed to read a file from computer A and write it to computer B, using a third computer C. The program is not working as expected. What is the MOST probable security feature of Java preventing the program from operating as intended?

Least privilege

Privilege escalation

Defense in depth

Privilege bracketing

Show Answer Comment (0)

Question 57

Which of the following is the PRIMARY risk with using open source software in a commercial software construction?

Lack of software documentation

License agreements requiring release of modified code

Expiration of the license agreement

Costs associated with support of the software

Show Answer Comment (0)

Question 58

When in the Software Development Life Cycle (SDLC) MUST software security functional requirements be defined?

After the system preliminary design has been developed and the data security categorization has been performed

After the vulnerability analysis has been performed and before the system detailed design begins

After the system preliminary design has been developed and before the data security categorization begins

After the business functional analysis and the data security categorization have been performed

Show Answer Comment (0)

Question 59

Which of the following is the BEST method to prevent malware from being introduced into a production environment?

Purchase software from a limited list of retailers

Verify the hash key or certificate key of all updates

Do not permit programs, patches, or updates from the Internet

Test all new software in a segregated environment

Show Answer Comment (0)

Question 60

The configuration management and control task of the certification and accreditation process is incorporated in which phase of the System Development Life Cycle (SDLC)?

System acquisition and development

System operations and maintenance

System initiation

System implementation

Show Answer Comment (0)

Total 1.482 questions