Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 84

Question list

List of questions

Question 831

(0)

Which of the following would an internal technical security audit BEST validate?

Question 832

(0)

Which of the following processes has the PRIMARY purpose of identifying outdated software versions, missing patches, and lapsed system updates?

Question 833

(0)

A development operations team would like to start building new applications delegating the cybersecurity responsibility as much as possible to the service provider. Which of the following environmen

Question 834

(0)

Change management policies and procedures belong to which of the following types of controls?

Question 835

(0)

What access control scheme uses fine-grained rules to specify the conditions under which access to each data item or applications is granted?

Question 836

(0)

Why is planning the MOST critical phase of a Role Based Access Control (RBAC) implementation?

Question 837

(0)

Vulnerability scanners may allow for the administrator to assign which of the following in order to assist in prioritizing remediation activities?

Question 838

(0)

In order for application developers to detect potential vulnerabilities earlier during the Software Development Life Cycle (SDLC), which of the following safeguards should be implemented FIRST as pa

Question 839

(0)

Physical assets defined in an organization's Business Impact Analysis (BIA) could include which of the following?

Question 840

(0)

What is the best way for mutual authentication of devices belonging to the same organization?

Question 831

Which of the following would an internal technical security audit BEST validate?

Whether managerial controls are in place

Support for security programs by executive management

Appropriate third-party system hardening

Implementation of changes to a system

Show Answer Comment (0)

Question 832

Which of the following processes has the PRIMARY purpose of identifying outdated software versions, missing patches, and lapsed system updates?

Penetration testing

Vulnerability management

Software Development Life Cycle (SDLC)

Life cycle management

Show Answer Comment (0)

A development operations team would like to start building new applications delegating the cybersecurity responsibility as much as possible to the service provider. Which of the following environments BEST fits their need?

Cloud Virtual Machines (VM)

Cloud application container within a Virtual Machine (VM)

On premises Virtual Machine (VM)

Self-hosted Virtual Machine (VM)

Show Answer Comment (0)

Question 834

Change management policies and procedures belong to which of the following types of controls?

Directive

Detective

Corrective

Preventative

Show Answer Comment (0)

Question 835

What access control scheme uses fine-grained rules to specify the conditions under which access to each data item or applications is granted?

Mandatory Access Control (MAC)

Discretionary Access Control (DAC)

Role Based Access Control (RBAC)

Attribute Based Access Control (ABAC)

Show Answer Comment (0)

Question 836

Why is planning the MOST critical phase of a Role Based Access Control (RBAC) implementation?

The criteria for measuring risk is defined.

User populations to be assigned to each role is determined.

Role mining to define common access patterns is performed.

The foundational criteria are defined.

Show Answer Comment (0)

Question 837

Vulnerability scanners may allow for the administrator to assign which of the following in order to assist in prioritizing remediation activities?

Definitions for each exposure type

Vulnerability attack vectors

Asset values for networks

Exploit code metrics

Show Answer Comment (0)

Question 838

In order for application developers to detect potential vulnerabilities earlier during the Software Development Life Cycle (SDLC), which of the following safeguards should be implemented FIRST as part of a comprehensive testing framework?

Source code review

Acceptance testing

Threat modeling

Automated testing

Show Answer Comment (0)