Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 64

Question list

List of questions

Question 631

(0)

Which of the following is a characteristic of a challenge/response authentication process?

Question 632

(0)

Which of the following is the PRIMARY risk associated with Extensible Markup Language (XML) applications?

Question 633

(0)

Activity to baseline, tailor, and scope security controls tikes place dring which National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) step?

Question 634

(0)

A large corporation is locking for a solution to automate access based on where on request is coming from, who the user is, what device they are connecting with, and what time of day they are attemp

Question 635

(0)

Which one of the following is an advantage of an effective release control strategy from a configuration control standpoint?

Question 636

(0)

When adopting software as a service (Saas), which security responsibility will remain with remain with the adopting organization?

Question 637

(0)

Secure real-time transport protocol (SRTP) provides security for which of the following?

Question 638

(0)

Which of the following authorization standards is built to handle Application Programming Interface (API) access for Federated Identity Management (FIM)?

Question 639

(0)

Which programming methodology allows a programmer to use pre-determined blocks of code end consequently reducing development time and programming costs?

Question 640

(0)

Why do certificate Authorities (CA) add value to the security of electronic commerce transactions?

Question 631

Which of the following is a characteristic of a challenge/response authentication process?

Using a password history blacklist

Transmitting a hash based on the user's password

Presenting distorted gravies of text for authentication

Requiring the use of non-consecutive numeric characters

Show Answer Comment (0)

Question 632

Which of the following is the PRIMARY risk associated with Extensible Markup Language (XML) applications?

Users can manipulate the code.

The stack data structure cannot be replicated.

The stack data structure is repetitive.

Potential sensitive data leakage.

Show Answer Comment (0)

Question 633

Activity to baseline, tailor, and scope security controls tikes place dring which National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) step?

Authorize IS.

Assess security controls.

Categorize Information system (IS).

Select security controls.

Show Answer Comment (0)

A large corporation is locking for a solution to automate access based on where on request is coming from, who the user is, what device they are connecting with, and what time of day they are attempting this access. What type of solution would suit their needs?

Discretionary Access Control (DAC)

Role Based Access Control (RBAC)

Mandater Access Control (MAC)

Network Access Control (NAC)

Show Answer Comment (0)

Question 635

Which one of the following is an advantage of an effective release control strategy from a configuration control standpoint?

Ensures that there is no loss of functionality between releases

Allows for future enhancements to existing features

Enforces backward compatibility between releases

Ensures that a trace for all deliverables is maintained and auditable

Show Answer Comment (0)

Question 636

When adopting software as a service (Saas), which security responsibility will remain with remain with the adopting organization?

Physical security

Data classification

Network control

Application layer control

Show Answer Comment (0)

Question 637

Secure real-time transport protocol (SRTP) provides security for which of the following?

time sensitive e-communication

Voice communication

Satellite communication

Network Communication for real-time operating systems

Show Answer Comment (0)

Question 638

Which of the following authorization standards is built to handle Application Programming Interface (API) access for Federated Identity Management (FIM)?

Security Assertion Markup Language (SAML)

Open Authentication (OAUTH)

Remote Authentication Dial-in User service (RADIUS)

Terminal Access Control Access Control System Plus (TACACS+)

Show Answer Comment (0)

Question 639

Which programming methodology allows a programmer to use pre-determined blocks of code end consequently reducing development time and programming costs?

Application security

Object oriented

Blocked algorithm

Assembly language

Show Answer Comment (0)