Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 96

Question list

List of questions

Question 951

(0)

How should the retention period for an organization's social media content be defined?

Question 952

(0)

In Identity Management (IdM), when is the verification stage performed?

Question 953

(0)

What is the PRIMARY purpose of auditing, as it relates to the security review cycle?

Question 954

(0)

Which of the following access control models is MOST restrictive?

Question 955

(0)

Which of the following is a canon of the (ISC)2 Code of Ethics?

Question 956

(0)

Which of the following will an organization's network vulnerability testing process BEST enhance?

Question 957

(0)

Which of the following is the MOST effective countermeasure against data remanence?

Question 958

(0)

A security professional has been requested by the Board of Directors and Chief Information Security Officer (CISO) to perform an internal and external penetration test. What is the BEST course of ac

Question 959

(0)

The Rivest-Shamir-Adleman (RSA) algorithm is BEST suited for which of the following operations?

Question 960

(0)

Configuring a Wireless Access Point (WAP) with the same Service Set Identifier (SSID) as another WAP in order to have users unknowingly connect is referred to as which of the following?

Question 951

How should the retention period for an organization's social media content be defined?

By the retention policies of each social media service

By the records retention policy of the organization

By the Chief Information Officer (CIO)

By the amount of available storage space

Show Answer Comment (0)

Question 952

In Identity Management (IdM), when is the verification stage performed?

As part of system sign-on

Before creation of the identity

After revocation of the identity

During authorization of the identity

Show Answer Comment (0)

Question 953

What is the PRIMARY purpose of auditing, as it relates to the security review cycle?

To ensure the organization's controls and pokies are working as intended

To ensure the organization can still be publicly traded

To ensure the organization's executive team won't be sued

To ensure the organization meets contractual requirements

Show Answer Comment (0)

Question 954

Which of the following access control models is MOST restrictive?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Role Based Access Control (RBAC)

Rule based access control

Show Answer Comment (0)

Question 955

Which of the following is a canon of the (ISC)2 Code of Ethics?

Integrity first, association before serf, and excellence in all we do

Perform all professional activities and duties in accordance with all applicable laws and the highest ethical standards.

Provide diligent and competent service to principals.

Cooperate with others in the interchange of knowledge and ideas for mutual security.

Show Answer Comment (0)

Question 956

Which of the following will an organization's network vulnerability testing process BEST enhance?

Firewall log review processes

Asset management procedures

Server hardening processes

Code review procedures

Show Answer Comment (0)

Question 957

Which of the following is the MOST effective countermeasure against data remanence?

Destruction

Clearing

Purging

Encryption

Show Answer Comment (0)

A security professional has been requested by the Board of Directors and Chief Information Security Officer (CISO) to perform an internal and external penetration test. What is the BEST course of action?

Review data localization requirements and regulations.

Review corporate security policies and procedures,

With notice to the Configuring a Wireless Access Point (WAP) with the same Service Set Identifier external test.

With notice to the organization, perform an external penetration test first, then an internal test.

Show Answer Comment (0)

Question 959

The Rivest-Shamir-Adleman (RSA) algorithm is BEST suited for which of the following operations?

Bulk data encryption and decryption

One-way secure hashing for user and message authentication

Secure key exchange for symmetric cryptography

Creating digital checksums for message integrity

Show Answer Comment (0)

Question 960

Configuring a Wireless Access Point (WAP) with the same Service Set Identifier (SSID) as another WAP in order to have users unknowingly connect is referred to as which of the following?

Jamming

Man-irHht-Middk (MITM)

War driving

Internet Protocol (IP) spoofing

Show Answer Comment (0)

Total 1.482 questions