Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 66

Question list

List of questions

Question 651

(0)

Which of the following is MOST important when determining appropriate countermeasures for an identified risk?

Question 652

(0)

When a flaw in Industrial control (ICS) software is discovered, what is the GREATEST impediment to deploying a patch?

Question 653

(0)

Which of the following is the BEST approach for a forensic examiner to obtain the greatest amount of relevant information form malicious software?

Question 654

(0)

In fault-tolerant systems, what do rollback capabilities permit?

Question 655

(0)

How does identity as a service (IDaaS) provide an easy mechanism for integrating identity service into individual applications with minimal development effort?

Question 656

(0)

A security practitioner has been tasked with establishing organizational asset handling procedures. What should be considered that would have the GRFATEST impact to the development of these procedu

Question 657

(0)

From an asset security perspective, what is the BEST countermeasure to prevent data theft due to data remanence when a sensitive data storage media is no longer needed?

Question 658

(0)

A project requires the use of en authentication mechanism where playback must be protected and plaintext secret must be used. Which of the following should be used?

Question 659

(0)

Which of the following threats exists with an implementation of digital signatures?

Question 660

(0)

What should be used immediately after a Business Continuity Plan (BCP) has been invoked?

Question 651

Which of the following is MOST important when determining appropriate countermeasures for an identified risk?

Interaction with existing controls

Cost

Organizational risk tolerance

Patch availability

Show Answer Comment (0)

Question 652

When a flaw in Industrial control (ICS) software is discovered, what is the GREATEST impediment to deploying a patch?

Many IG systems have software that is no longer being maintained by the venders.

Compensating controls may impact IG performance.

Testing a patch in an IG may require more resources than the organization can commit.

vendors are required to validate the operability patches.

Show Answer Comment (0)

Question 653

Which of the following is the BEST approach for a forensic examiner to obtain the greatest amount of relevant information form malicious software?

Analyze the behavior of the program.

Examine the file properties and permissions.

Review the code to identify its origin.

Analyze the logs generated by the software.

Show Answer Comment (0)

Question 654

In fault-tolerant systems, what do rollback capabilities permit?

Restoring the system to a previous functional state

Identifying the error that caused the problem

Allowing the system to an in a reduced manner

Isolating the error that caused the problem

Show Answer Comment (0)

Question 655

How does identity as a service (IDaaS) provide an easy mechanism for integrating identity service into individual applications with minimal development effort?

By allowing the identification logic and storage of an identity's attributes to be maintained externally

By integrating internal provisioning procedures with external authentication processes

By allowing for internal provisioning of user accounts

By keeping all user information in easily accessible cloud repositories

Show Answer Comment (0)

Question 656

A security practitioner has been tasked with establishing organizational asset handling procedures.

What should be considered that would have the GRFATEST impact to the development of these procedures?

Media handling procedures

User roles and responsibilities

Acceptable Use Policy (ALP)

Information classification scheme

Show Answer Comment (0)

Question 657

From an asset security perspective, what is the BEST countermeasure to prevent data theft due to data remanence when a sensitive data storage media is no longer needed?

Return the media to the system owner.

Delete the sensitive data from the media.

Physically destroy the retired media.

Encrypt data before it Is stored on the media.

Show Answer Comment (0)

Question 658

A project requires the use of en authentication mechanism where playback must be protected and plaintext secret must be used. Which of the following should be used?

Password Authentication Protocol (PAP)

Extensible Authentication Protocol (EAP)

Secure Hash Algorithm (SHA)

Challenge Handshake Authentication Protocol (CHAP)

Show Answer Comment (0)