Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 81

Question list

List of questions

Question 801

(0)

Which of the following is true of Service Organization Control (SOC) reports?

Question 802

(0)

What testing technique enables the designer to develop mitigation strategies for potential vulnerabilities?

Question 803

(0)

Asymmetric algorithms are used for which of the following when using Secure Sockets Layer/Transport Layer Security (SSL/TLS) for implementing network security?

Question 804

(0)

What is the MOST common component of a vulnerability management framework?

Question 805

(0)

A new Chief Information Officer (CIO) created a group to write a data retention policy based on applicable laws. Which of the following is the PRIMARY motivation for the policy?

Question 806

(0)

What determines the level of security of a combination lock?

Question 807

(0)

A user downloads a file from the Internet, then applies the Secure Hash Algorithm 3 (SHA-3c?

Question 808

(0)

Which of the following is held accountable for the risk to organizational systems and data that result from outsourcing Information Technology (IT) systems and services?

Question 809

(0)

Which of the following is the BEST definition of Cross-Site Request Forgery (CSRF)?

Question 810

(0)

Which of the following is a process in the access provisioning lifecycle that will MOST likely identify access aggregation issues?

Question 801

Which of the following is true of Service Organization Control (SOC) reports?

SOC 1 Type 2 reports assess the security, confidentiality, integrity, and availability of an organization's controls

SOC 2 Type 2 reports include information of interest to the service organization's management

SOC 2 Type 2 reports assess internal controls for financial reporting

SOC 3 Type 2 reports assess internal controls for financial reporting

Show Answer Comment (0)

Question 802

What testing technique enables the designer to develop mitigation strategies for potential vulnerabilities?

Manual inspections and reviews

Penetration testing

Threat modeling

Source code review

Show Answer Comment (0)

Question 803

Asymmetric algorithms are used for which of the following when using Secure Sockets Layer/Transport Layer Security (SSL/TLS) for implementing network security?

Peer authentication

Payload data encryption

Session encryption

Hashing digest

Show Answer Comment (0)

Question 804

What is the MOST common component of a vulnerability management framework?

Risk analysis

Patch management

Threat analysis

Backup management

Show Answer Comment (0)

Question 805

A new Chief Information Officer (CIO) created a group to write a data retention policy based on applicable laws. Which of the following is the PRIMARY motivation for the policy?

To back up data that is used on a daily basis

To dispose of data in order to limit liability

To reduce costs by reducing the amount of retained data

To classify data according to what it contains

Show Answer Comment (0)

Question 806

What determines the level of security of a combination lock?

Complexity of combination required to open the lock

Amount of time it takes to brute force the combination

The number of barrels associated with the internal mechanism

The hardness score of the metal lock material

Show Answer Comment (0)

Question 807

A user downloads a file from the Internet, then applies the Secure Hash Algorithm 3 (SHA-3c?

It verifies the integrity of the file.

It checks the file for malware.

It ensures the entire file downloaded.

It encrypts the entire file.

Show Answer Comment (0)

Question 808

Which of the following is held accountable for the risk to organizational systems and data that result from outsourcing Information Technology (IT) systems and services?

The acquiring organization

The service provider

The risk executive (function)

The IT manager

Show Answer Comment (0)