Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 74

Question list

List of questions

Question 731

(0)

Individuals have been identified and determined as having a need-to-know for the information. Which of the following access control methods MUST include a consistent set of rules for controlling an

Question 732

(0)

When can a security program be considered effective?

Question 733

(0)

Which of the following is the MOST important activity an organization performs to ensure that securiy is part of the overall organization culture?

Question 734

(0)

What is the PRIMARY benefit of analyzing the partition layout of a hard disk volume when performing forensic analysis?

Question 735

(0)

Which of the following System and Organization Controls (SOC) report types should an organization request if they require a period of time report covering security and availability for a particular

Question 736

(0)

Which of the following is the MOST important action regarding authentication?

Question 737

(0)

Which of the following is the BEST statement for a professional to include as port of business continuity (BC) procedure?

Question 738

(0)

Additional padding may be added to the Encapsulating security protocol (ESP) trailer to provide which of the following?

Question 739

(0)

After a breach incident, investigators narrowed the attack to a specific network administrator's credentials. However, there was no evidence to determine how the hackers obtained the credentials. M

Question 740

(0)

Which of the following is a characteristic of convert security testing?

Question 731

Individuals have been identified and determined as having a need-to-know for the information.

Which of the following access control methods MUST include a consistent set of rules for controlling and limiting access?

Attribute Based Access Control (ABAC)

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Show Answer Comment (0)

Question 732

When can a security program be considered effective?

Audits are rec/party performed and reviewed.

Vulnerabilities are proactively identified.

Risk is lowered to an acceptable level.

Badges are regulatory performed and validated

Show Answer Comment (0)

Question 733

Which of the following is the MOST important activity an organization performs to ensure that securiy is part of the overall organization culture?

Ensue security policies are issued to all employees

Perform formal reviews of security Incidents.

Manage a program of security audits.

Work with senior management to meet business goals.

Show Answer Comment (0)

Question 734

What is the PRIMARY benefit of analyzing the partition layout of a hard disk volume when performing forensic analysis?

Sectors which are not assigned to a perform may contain data that was purposely hidden.

Volume address information for he hard disk may have been modified.

partition tables which are not completely utilized may contain data that was purposely hidden

Physical address information for the hard disk may have been modified.

Show Answer Comment (0)

Which of the following System and Organization Controls (SOC) report types should an organization request if they require a period of time report covering security and availability for a particular system?

SOC 1 Type1

SOC 1Type2

SOC 2 Type 1

SOC 2 Type 2

Show Answer Comment (0)

Question 736

Which of the following is the MOST important action regarding authentication?

Granting access rights

Enrolling in the system

Establishing audit controls

Obtaining executive authorization

Show Answer Comment (0)

Question 737

Which of the following is the BEST statement for a professional to include as port of business continuity (BC) procedure?

A full data backup must be done upon management request.

An incremental data backup must be done upon management request.

A full data backup must be done based on the needs of the business.

In incremental data backup must be done after each system change.

Show Answer Comment (0)

Question 738

Additional padding may be added to the Encapsulating security protocol (ESP) trailer to provide which of the following?

Data origin authentication

Partial traffic flow confidentiality

protection ao>ainst replay attack

Access control

Show Answer Comment (0)

Question 739

After a breach incident, investigators narrowed the attack to a specific network administrator's credentials. However, there was no evidence to determine how the hackers obtained the credentials.

Much of the following actions could have BEST avoided the above breach per the investigation described above?

A periodic review of network access loos

A periodic review of active users en the network

A periodic review of all privileged accounts actions

A periodic review of password strength of all users across the organization

Show Answer Comment (0)