Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home ISC CISSP

ISC CISSP Exam Practice Questions (P. 4)

  • Full Access (484 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #31
Which of the following encryption technologies has the ability to function as a stream cipher?
  1. A
    Cipher Block Chaining (CBC) with error propagation
  2. B
    Electronic Code Book (ECB)
  3. C
    Cipher Feedback (CFB)
  4. D
    Feistel cipher

Correct Answer:
C

Question #32
In a disaster recovery (DR) test, which of the following would be a trait of crisis management?
  1. A
    Process
  2. B
    Anticipate
  3. C
    Strategic
  4. D
    Wide focus

Correct Answer:
B

Question #33
Which of the following BEST describes the purpose of the reference monitor when defining access control to enforce the security model?
  1. A
    Strong operational security to keep unit members safe
  2. B
    Policies to validate organization rules
  3. C
    Cyber hygiene to ensure organizations can keep systems healthy
  4. D
    Quality design principles to ensure quality by design

Correct Answer:
B

Question #34
Which of the following is security control volatility?
  1. A
    A reference to the impact of the security control.
  2. B
    A reference to the likelihood of change in the security control.
  3. C
    A reference to how unpredictable the security control is.
  4. D
    A reference to the stability of the security control.

Correct Answer:
C

Question #35
When auditing the Software Development Life Cycle (SDLC) which of the following is one of the high-level audit phases?
  1. A
    Planning
  2. B
    Risk assessment
  3. C
    Due diligence
  4. D
    Requirements

Correct Answer:
C

Question #36
What is the term used to define where data is geographically stored in the cloud?
  1. A
    Data privacy rights
  2. B
    Data sovereignty
  3. C
    Data warehouse
  4. D
    Data subject rights

Correct Answer:
B

Question #37
Which of the following does the security design process ensure within the System Development Life Cycle (SDLC)?
  1. A
    Proper security controls, security objectives, and security goals are properly initiated.
  2. B
    Security objectives, security goals, and system test are properly conducted.
  3. C
    Proper security controls, security goals, and fault mitigation are properly conducted.
  4. D
    Security goals, proper security controls, and validation are properly initiated.

Correct Answer:
D

Question #38
Which of the following is MOST important to follow when developing information security controls for an organization?
  1. A
    Use industry standard best practices for security controls in the organization.
  2. B
    Exercise due diligence with regard to all risk management information to tailor appropriate controls.
  3. C
    Review all local and international standards and choose the most stringent based on location.
  4. D
    Perform a risk assessment and choose a standard that addresses existing gaps.

Correct Answer:
C

Question #39
When recovering from an outage, what is the Recovery Point Objective (RPO), in terms of data recovery?
  1. A
    The RPO is the minimum amount of data that needs to be recovered.
  2. B
    The RPO is the amount of time it takes to recover an acceptable percentage of data lost.
  3. C
    The RPO is a goal to recover a targeted percentage of data lost.
  4. D
    The RPO is the maximum amount of time for which loss of data is acceptable.

Correct Answer:
D

Question #40
Which of the following attacks, if successful, could give an intruder complete control of a software-defined networking (SDN) architecture?
  1. A
    A brute force password attack on the Secure Shell (SSH) port of the controller
  2. B
    Sending control messages to open a flow that does not pass a firewall from a compromised host within the network
  3. C
    Remote Authentication Dial-In User Service (RADIUS) token replay attack
  4. D
    Sniffing the traffic of a compromised host inside the network

Correct Answer:
B

Previous Questions Next Questions

All Pages