ISC CISSP Practice Test - Questions Answers, Page 83

An application team is running tests to ensure that user entry fields will not accept invalid input of any length. What type of negative testing is this an example of?

An Internet software application requires authentication before a user is permitted to utilize the resource. Which testing scenario BEST validates the functionality of the application?

Which of the following techniques BEST prevents buffer overflows?

A security architect is responsible for the protection of a new home banking system. Which of the following solutions can BEST improve the confidentiality and integrity of this external system?

A security professional recommends that a company integrate threat modeling into its Agile development processes. Which of the following BEST describes the benefits of this approach?

A security consultant has been hired by a company to establish its vulnerability management program. The consultant is now in the deployment phase. Which of the following tasks is part of this process?

Directive controls are a form of change management policy and procedures. Which of the following subsections are recommended as part of the change management process?

Which of the following BEST describes how access to a system is granted to federated user accounts?

Which of the following is the primary advantage of segmenting Virtual Machines (VM) using physical networks?