ISC CISSP Practice Test – Member Shared Questions, Page 86

Question 851

When would an organization review a Business Continuity Management (BCM) system?

A.

When major changes occur on systems

B.

When personnel changes occur

C.

Before and after Disaster Recovery (DR) tests

D.

At planned intervals

Show Answer Comment (0)

Question 852

Which of the following is a characteristic of the independent testing of a program?

A.

Independent testing increases the likelihood that a test will expose the effect of a hidden feature.

B.

Independent testing decreases the likelihood that a test will expose the effect of a hidden feature.

C.

Independent testing teams help decrease the cost of creating test data and system design specification.

D.

Independent testing teams help identify functional requirements and Service Level Agreements (SLA)

Show Answer Comment (0)

Question 853

Which of the following MUST be considered when developing business rules for a data loss prevention (DLP) solution?

A.

Data availability

B.

Data sensitivity

C.

Data ownership

D.

Data integrity

Show Answer Comment (0)

Question 854

What is the BEST approach for maintaining ethics when a security professional is unfamiliar with the culture of a country and is asked to perform a questionable task?

A.

Exercise due diligence when deciding to circumvent host government requests.

B.

Become familiar with the means in which the code of ethics is applied and considered.

C.

Complete the assignment based on the customer's wishes.

D.

Execute according to the professional's comfort level with the code of ethics.

Show Answer Comment (0)

Question 855

Which of the following activities is MOST likely to be performed during a vulnerability assessment?

A.

Establish caller authentication procedures to verify the identities of users.

B.

Analyze the environment by conducting interview sessions with relevant parties.

C.

Document policy exceptions required to access systems in non-compliant areas.

D.

Review professorial credentials of the vulnerability assessment team or vendor.

Show Answer Comment (0)

Question 856

Which of the following is the BEST defense against password guessing?

A.

Limit external connections to the network.

B.

Disable the account after a limited number of unsuccessful attempts.

C.

Force the password to be changed after an invalid password has been entered.

D.

Require a combination of letters, numbers, and special characters in the password.

Show Answer Comment (0)

Question 857

Why would a security architect specify that a default route pointing to a sinkhole be injected into internal networks?

A.

To have firewalls route all network traffic

B.

To detect the traffic destined to non-existent network destinations

C.

To exercise authority over the network department

D.

To re-inject the route into external networks

Show Answer Comment (0)

Question 858

Which one of the following documentation should be included in a Disaster Recovery (DR) package?

A.

Source code, compiled code, firmware updates, operational log book and manuals.

B.

Data encrypted in original format, auditable transaction data, and recovery instructions for future extraction on demand.

C.

Hardware configuration instructions, hardware configuration software, an operating system image, a data restoration option, media retrieval instructions, ...

D.

System configuration including hardware, software, hardware, interfaces, software Application Programming Interface (API) configuration, data structure, ....

Show Answer Comment (0)

Question 859

How long should the records on a project be retained?

A.

For the duration of the project, or at the discretion of the record owner

B.

Until they are no longer useful or required by policy

C.

Until five years after the project ends, then move to archives

D.

For the duration of the organization fiscal year

Show Answer Comment (0)

Question 860

Which of the following phases involves researching a target's configuration from public sources when performing a penetration test?

A.

Information gathering

B.

Social engineering

C.

Target selection

D.

Traffic enumeration

Show Answer Comment (0)

ISC CISSP Practice Test - Questions Answers, Page 86

Question list

List of questions

Question 851

(0)

Question 852

(0)

Question 853

(0)

Question 854

(0)

Question 855

(0)

Question 856

(0)

Question 857

(0)

Question 858

(0)

Question 859

(0)

Question 860

(0)

Related questions

Question 851

Question 852

Question 853

Question 854

Question 855

Question 856

Question 857

Question 858

Question 859

Question 860

BASIC - 1 Month

PLUS - 2 Months

PRO - 6 Months

BASIC - 1 Month

PLUS - 2 Months

PRO - 6 Months