Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 93

Question list

List of questions

Question 921

(0)

Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?

Question 922

(0)

The application owner of a system that handles confidential data leaves an organization. It is anticipated that a replacement will be hired in approximately six months. During that time, which of th

Question 923

(0)

Which Redundant Array c/ Independent Disks (RAID) Level does the following diagram represent?

Question 924

(0)

Which of the following is used to ensure that data mining activities Will NOT reveal sensitive data?

Question 925

(0)

Why are packet filtering routers used in low-risk environments?

Question 926

(0)

Which of the following protocols will allow the encrypted transfer of content on the Internet?

Question 927

(0)

What requirement MUST be met during internal security audits to ensure that all information provided is expressed as an objective assessment without risk of retaliation?

Question 928

(0)

In order to support the least privilege security principle when a resource is transferring within the organization from a production support system administration role to a developer role, what chan

Question 929

(0)

What is the FINAL step in the waterfall method for contingency planning?

Question 930

(0)

Which of the following is a security weakness in the evaluation of common criteria (CC) products?

Question 921

Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?

Identifying the events and environmental factors that can adversely affect an organization

Identifying what is important and critical based on disruptions that can affect the organization.

Establishing the need for a Business Continuity Plan (BCP) based on threats that can affect an organization

Preparing a program to create an organizational awareness for executing the Business Continuity Plan (BCP)

Show Answer Comment (0)

The application owner of a system that handles confidential data leaves an organization. It is anticipated that a replacement will be hired in approximately six months. During that time, which of the following should the organization do?

Gram temporary access to the former application owner's account

Assign a temporary application owner to the system.

Restrict access to the system until a replacement application owner rs hired.

Prevent changes to the confidential data until a replacement application owner is hired.

Show Answer Comment (0)

Question 923

Which Redundant Array c/ Independent Disks (RAID) Level does the following diagram represent?

RAID 0

RAID 1

RAID 5

RAID 10

Show Answer Comment (0)

Question 924

Which of the following is used to ensure that data mining activities Will NOT reveal sensitive data?

Implement two-factor authentication on the underlying infrastructure.

Encrypt data at the field level and tightly control encryption keys.

Preprocess the databases to see if inn ...... can be disclosed from the learned patterns.

Implement the principle of least privilege on data elements so a reduced number of users can access the database.

Show Answer Comment (0)

Question 925

Why are packet filtering routers used in low-risk environments?

They are high-resolution source discrimination and identification tools.

They are fast and flexible, and protect against Internet Protocol (IP) spoofing.

They are fast, flexible, and transparent.

They enforce strong user authentication and audit tog generation.

Show Answer Comment (0)

Question 926

Which of the following protocols will allow the encrypted transfer of content on the Internet?

Server Message Block (SMB)

Secure copy

Hypertext Transfer Protocol (HTTP)

Remote copy

Show Answer Comment (0)

Question 927

What requirement MUST be met during internal security audits to ensure that all information provided is expressed as an objective assessment without risk of retaliation?

The auditor must be independent and report directly to the management.

The auditor must utilize automated tools to back their findings.

The auditor must work closely with both the information Technology (IT) and security sections of an organization.

The auditor must perform manual reviews of systems and processes.

Show Answer Comment (0)

Question 928

In order to support the least privilege security principle when a resource is transferring within the organization from a production support system administration role to a developer role, what changes should be made to the resource's access to the production operating system (OS) directory structure?

From Read Only privileges to No Access Privileges

From Author privileges to Administrator privileges

From Administrator privileges to No Access privileges

From No Access Privileges to Author privileges

Show Answer Comment (0)