ExamGecko
Login
Home / ISC / CISSP / List of questions
Ask Question

ISC CISSP Practice Test - Questions Answers, Page 89

List of questions

Question 881

Report Export Collapse

Which of the following value comparisons MOST accurately reflects the agile development approach?

Processes and toots over individuals and interactions
Processes and toots over individuals and interactions
Contract negotiation over customer collaboration
Contract negotiation over customer collaboration
Following a plan over responding to change
Following a plan over responding to change
Working software over comprehensive documentation
Working software over comprehensive documentation
Suggested answer: D
asked 18/09/2024
Tyler Evans
49 questions

Question 882

Report Export Collapse

Which of the following needs to be included in order for High Availability (HA) to continue operations during planned system outages?

Redundant hardware, disk spanning, and patching
Redundant hardware, disk spanning, and patching
Load balancing, power reserves, and disk spanning
Load balancing, power reserves, and disk spanning
Backups, clustering, and power reserves
Backups, clustering, and power reserves
Clustering, load balancing, and fault-tolerant options
Clustering, load balancing, and fault-tolerant options
Suggested answer: D
asked 18/09/2024
Yohane Phompho
36 questions

Question 883

Report Export Collapse

Which of the following is the MOST effective countermeasure against Man-in-the Middle (MITM) attacks while using online banking?

Transport Layer Security (TLS)
Transport Layer Security (TLS)
Secure Sockets Layer (SSL)
Secure Sockets Layer (SSL)
Pretty Good Privacy (PGP)
Pretty Good Privacy (PGP)
Secure Shell (SSH)
Secure Shell (SSH)
Suggested answer: A
asked 18/09/2024
Leon Chukwuma
35 questions

Question 884

Report Export Collapse

According to the Capability Maturity Model Integration (CMMI), which of the following levels is identified by a managed process that is tailored from the organization's set of standard processes according to the organization's tailoring guidelines?

Level 0: Incomplete
Level 0: Incomplete
Level 1: Performed
Level 1: Performed
Level 2: Managed
Level 2: Managed
Level 3: Defined
Level 3: Defined
Suggested answer: D
asked 18/09/2024
Laura Archilla
39 questions

Question 885

Report Export Collapse

Point-to-Point Protocol (PPP) was designed to specifically address what issue?

A common design flaw in telephone modems
A common design flaw in telephone modems
Speed and reliability issues between dial-up users and Internet Service Providers (ISP).
Speed and reliability issues between dial-up users and Internet Service Providers (ISP).
Compatibility issues with personal computers and web browsers
Compatibility issues with personal computers and web browsers
The security of dial-up connections to remote networks
The security of dial-up connections to remote networks
Suggested answer: B
asked 18/09/2024
john wick
41 questions

Question 886

Report Export Collapse

Which of the following is an advantage of' Secure Shell (SSH)?

It operates at the network layer.
It operates at the network layer.
It encrypts transmitted User ID and passwords.
It encrypts transmitted User ID and passwords.
It uses challenge-response to authenticate each party.
It uses challenge-response to authenticate each party.
It uses the International Data Encryption Algorithm (IDEA) for data privacy.
It uses the International Data Encryption Algorithm (IDEA) for data privacy.
Suggested answer: C
asked 18/09/2024
Matteo Di Pomponio
44 questions

Question 887

Report Export Collapse

A security engineer is designing a Customer Relationship Management (CRM) application for a thirdparty vendor. In which phase of the System Development Life Cycle (SDLC) will it be MOST beneficial to conduct a data sensitivity assessment?

Development / Acquisition
Development / Acquisition
Initiation
Initiation
Enumeration
Enumeration
Operation / Maintenance
Operation / Maintenance
Suggested answer: B
asked 18/09/2024
Francesco Facco
34 questions

Question 888

Report Export Collapse

Which of the following is a PRIMARY challenge when running a penetration test?

Determining the cost
Determining the cost
Establishing a business case
Establishing a business case
Remediating found vulnerabilities
Remediating found vulnerabilities
Determining the depth of coverage
Determining the depth of coverage
Suggested answer: D
asked 18/09/2024
Vadym Popov
43 questions

Question 889

Report Export Collapse

Which one of the following would cause an immediate review and possible change to the security policies of an organization?

Become a Premium Member for full access
  Unlock Premium Member

Question 890

Report Export Collapse

An audit of an application reveals that the current configuration does not match the configuration of the originally implemented application. Which of the following is the FIRST action to be taken?

Become a Premium Member for full access
  Unlock Premium Member
Total 1.482 questions
Go to page: of 149
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which Open Systems Interconnection (OSI) layer(s) BEST corresponds to the network access layer in the Transmission Control Protocol/Internet Protocol (TCP/IP) model?
All of the following items should be included in a Business Impact Analysis (BIA) questionnaire EXCEPT questions that
An organization is preparing to achieve General Data Protection Regulation (GDPR) compliance. The Chief Information Security Officer (CISO) is reviewing data protection methods. Which of the following is the BEST data protection method?
Which one of the following would cause an immediate review and possible change to the security policies of an organization?
Which of the following are all elements of a disaster recovery plan (DRP)?
What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?
Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?
Which of the following would BEST support effective testing of patch compatibility when patches are applied to an organization's systems?
Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?
In what phase of the System Development Life Cycle (SDLC) should security training for the development team begin?