Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 85

Question list

List of questions

Question 841

(0)

Which of the following encryption types is used in Hash Message Authentication Code (HMAC) for key distribution?

Question 842

(0)

Compared with hardware cryptography, software cryptography is generally

Question 843

(0)

A financial company has decided to move its main business application to the Cloud. The legal department objects, arguing that the move of the platform should comply with several regulatory obligati

Question 844

(0)

An employee receives a promotion that entities them to access higher-level functions on the company's accounting system, as well as keeping their access to the previous system that is no longer need

Question 845

(0)

Which of the following is PRIMARILY adopted for ensuring the integrity of information is preserved?

Question 846

(0)

Why might a network administrator choose distributed virtual switches instead of stand-alone switches for network segmentation?

Question 847

(0)

An organization has implemented a new backup process which protects confidential data by encrypting the information stored on backup tapes. Which of the following is a MAJOR data confidentiality con

Question 848

(0)

Organization A is adding a large collection of confidential data records that it received when it acquired Organization B to its data store. Many of the users and staff from Organization B are no lo

Question 849

(0)

An organization has a short-term agreement with a public Cloud Service Provider (CSP). Which of the following BEST protects sensitive data once the agreement expires and the assets are reused?

Question 850

(0)

Which of the following techniques is effective to detect taps in fiber optic cables?

Question 841

Which of the following encryption types is used in Hash Message Authentication Code (HMAC) for key distribution?

Symmetric

Asymmetric

Ephemeral

Permanent

Show Answer Comment (0)

Question 842

Compared with hardware cryptography, software cryptography is generally

less expensive and slower.

more expensive and faster.

more expensive and slower.

less expensive and faster.

Show Answer Comment (0)

A financial company has decided to move its main business application to the Cloud. The legal department objects, arguing that the move of the platform should comply with several regulatory obligations such as the General Data Protection (GDPR) and ensure data confidentiality. The Chief Information Security Officer (CISO) says that the cloud provider has met all regulations requirements and even provides its own encryption solution with internally-managed encryption keys to address data confidentiality. Did the CISO address all the legal requirements in this situation?

No, because the encryption solution is internal to the cloud provider.

Yes, because the cloud provider meets all regulations requirements.

Yes, because the cloud provider is GDPR compliant.

No, because the cloud provider is not certified to host government data.

Show Answer Comment (0)

Question 844

An employee receives a promotion that entities them to access higher-level functions on the company's accounting system, as well as keeping their access to the previous system that is no longer needed or applicable. What is the name of the process that tries to remove this excess privilege?

Access provisioning

Segregation of Duties (SoD)

Access certification

Access aggregation

Show Answer Comment (0)

Question 845

Which of the following is PRIMARILY adopted for ensuring the integrity of information is preserved?

Data at rest protection

Transport Layer Security (TLS)

Role Based Access Control (RBAC)

One-way encryption

Show Answer Comment (0)

Question 846

Why might a network administrator choose distributed virtual switches instead of stand-alone switches for network segmentation?

To standardize on a single vendor

To ensure isolation of management traffic

To maximize data plane efficiency

To reduce the risk of configuration errors

Show Answer Comment (0)

Question 847

An organization has implemented a new backup process which protects confidential data by encrypting the information stored on backup tapes. Which of the following is a MAJOR data confidentiality concern after the implementation of this new backup process?

Tape backup rotation

Pre-existing backup tapes

Tape backup compression

Backup tape storage location

Show Answer Comment (0)

Question 848

Organization A is adding a large collection of confidential data records that it received when it acquired Organization B to its data store. Many of the users and staff from Organization B are no longer available. Which of the following MUST

Organization A 0do to property classify and secure the acquired data?

Assign data owners from Organization A to the acquired data.

Create placeholder accounts that represent former users from Organization B.

Archive audit records that refer to users from Organization A.

Change the data classification for data acquired from Organization B.

Show Answer Comment (0)

Question 849

An organization has a short-term agreement with a public Cloud Service Provider (CSP). Which of the following BEST protects sensitive data once the agreement expires and the assets are reused?

Recommended that the business data owners use continuous monitoring and analysis of applications to prevent data loss.

Recommend that the business data owners use internal encryption keys for data-at-rest and datain- transit to the storage environment.

Use a contractual agreement to ensure the CSP wipes the data from the storage environment.

Use a National Institute of Standards and Technology (NIST) recommendation for wiping data on the storage environment.

Show Answer Comment (0)