Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 87

Question list

List of questions

Question 861

(0)

Which of the following provides the BEST method to verify that security baseline configurations are maintained?

Question 862

(0)

Which attack defines a piece of code that is inserted into software to trigger a malicious function?

Question 863

(0)

Which of the following is the MOST critical success factor in the security patch management process?

Question 864

(0)

A security professional should consider the protection of which of the following elements FIRST when developing a defense-in-depth strategy for a mobile workforce?

Question 865

(0)

Which of the following is the BEST technique to facilitate secure software development?

Question 866

(0)

What is the MAIN reason to ensure the appropriate retention periods are enforced for data stored on electronic media?

Question 867

(0)

For a federated identity solution, a third-party Identity Provider (IdP) is PRIMARILY responsible for which of the following?

Question 868

(0)

What is the BEST way to correlate large volumes of disparate data sources in a Security Operations Center (SOC) environment?

Question 869

(0)

Which of the following steps should be conducted during the FIRST phase of software assurance in a generic acquisition process?

Question 870

(0)

Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?

Question 861

Which of the following provides the BEST method to verify that security baseline configurations are maintained?

Perform regular system security testing.

Design security early in the development cycle.

Analyze logs to determine user activities.

Perform quarterly risk assessments.

Show Answer Comment (0)

Question 862

Which attack defines a piece of code that is inserted into software to trigger a malicious function?

Phishing

Salami

Back door

Logic bomb

Show Answer Comment (0)

Question 863

Which of the following is the MOST critical success factor in the security patch management process?

Tracking and reporting on inventory

Supporting documentation

Management review of reports

Risk and impact analysis

Show Answer Comment (0)

Question 864

A security professional should consider the protection of which of the following elements FIRST when developing a defense-in-depth strategy for a mobile workforce?

Network perimeters

Demilitarized Zones (DM2)

Databases and back-end servers

End-user devices

Show Answer Comment (0)

Question 865

Which of the following is the BEST technique to facilitate secure software development?

Adhere to secure coding practices for the software application under development.

Conduct penetrating testing for the software application under development.

Develop a threat modeling review for the software application under development.

Perform a code review process for the software application under development.

Show Answer Comment (0)

Question 866

What is the MAIN reason to ensure the appropriate retention periods are enforced for data stored on electronic media?

To reduce the carbon footprint by eliminating paper

To create an inventory of data assets stored on disk for backup and recovery

To declassify information that has been improperly classified

To reduce the risk of loss, unauthorized access, use, modification, and disclosure

Show Answer Comment (0)

Question 867

For a federated identity solution, a third-party Identity Provider (IdP) is PRIMARILY responsible for which of the following?

Access Control

Account Management

Authentication

Authorization

Show Answer Comment (0)

Question 868

What is the BEST way to correlate large volumes of disparate data sources in a Security Operations Center (SOC) environment?

Implement Intrusion Detection System (IDS).

Implement a Security Information and Event Management (SIEM) system.

Hire a team of analysts to consolidate data and generate reports.

Outsource the management of the SOC.

Show Answer Comment (0)

Question 869

Which of the following steps should be conducted during the FIRST phase of software assurance in a generic acquisition process?

Establishing and consenting to the contract work schedule

Issuing a Request for proposal (RFP) with a work statement

Developing software requirements to be included in work statement

Reviewing and accepting software deliverables

Show Answer Comment (0)

Question 870

Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?

Turn the computer on and collect volatile data.

Turn the computer on and collect network information.

Leave the computer off and prepare the computer for transportation to the laboratory

Remove the hard drive, prepare it for transportation, and leave the hardware ta the scene.

Show Answer Comment (0)

Total 1.482 questions