Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 86

Question list

List of questions

Question 851

(0)

When would an organization review a Business Continuity Management (BCM) system?

Question 852

(0)

Which of the following is a characteristic of the independent testing of a program?

Question 853

(0)

Which of the following MUST be considered when developing business rules for a data loss prevention (DLP) solution?

Question 854

(0)

What is the BEST approach for maintaining ethics when a security professional is unfamiliar with the culture of a country and is asked to perform a questionable task?

Question 855

(0)

Which of the following activities is MOST likely to be performed during a vulnerability assessment?

Question 856

(0)

Which of the following is the BEST defense against password guessing?

Question 857

(0)

Why would a security architect specify that a default route pointing to a sinkhole be injected into internal networks?

Question 858

(0)

Which one of the following documentation should be included in a Disaster Recovery (DR) package?

Question 859

(0)

How long should the records on a project be retained?

Question 860

(0)

Which of the following phases involves researching a target's configuration from public sources when performing a penetration test?

Question 851

When would an organization review a Business Continuity Management (BCM) system?

When major changes occur on systems

When personnel changes occur

Before and after Disaster Recovery (DR) tests

At planned intervals

Show Answer Comment (0)

Question 852

Which of the following is a characteristic of the independent testing of a program?

Independent testing increases the likelihood that a test will expose the effect of a hidden feature.

Independent testing decreases the likelihood that a test will expose the effect of a hidden feature.

Independent testing teams help decrease the cost of creating test data and system design specification.

Independent testing teams help identify functional requirements and Service Level Agreements (SLA)

Show Answer Comment (0)

Question 853

Which of the following MUST be considered when developing business rules for a data loss prevention (DLP) solution?

Data availability

Data sensitivity

Data ownership

Data integrity

Show Answer Comment (0)

Question 854

What is the BEST approach for maintaining ethics when a security professional is unfamiliar with the culture of a country and is asked to perform a questionable task?

Exercise due diligence when deciding to circumvent host government requests.

Become familiar with the means in which the code of ethics is applied and considered.

Complete the assignment based on the customer's wishes.

Execute according to the professional's comfort level with the code of ethics.

Show Answer Comment (0)

Question 855

Which of the following activities is MOST likely to be performed during a vulnerability assessment?

Establish caller authentication procedures to verify the identities of users.

Analyze the environment by conducting interview sessions with relevant parties.

Document policy exceptions required to access systems in non-compliant areas.

Review professorial credentials of the vulnerability assessment team or vendor.

Show Answer Comment (0)

Question 856

Which of the following is the BEST defense against password guessing?

Limit external connections to the network.

Disable the account after a limited number of unsuccessful attempts.

Force the password to be changed after an invalid password has been entered.

Require a combination of letters, numbers, and special characters in the password.

Show Answer Comment (0)

Question 857

Why would a security architect specify that a default route pointing to a sinkhole be injected into internal networks?

To have firewalls route all network traffic

To detect the traffic destined to non-existent network destinations

To exercise authority over the network department

To re-inject the route into external networks

Show Answer Comment (0)

Question 858

Which one of the following documentation should be included in a Disaster Recovery (DR) package?

Source code, compiled code, firmware updates, operational log book and manuals.

Data encrypted in original format, auditable transaction data, and recovery instructions for future extraction on demand.

Hardware configuration instructions, hardware configuration software, an operating system image, a data restoration option, media retrieval instructions, ...

System configuration including hardware, software, hardware, interfaces, software Application Programming Interface (API) configuration, data structure, ....

Show Answer Comment (0)