CISSP Exam - Certified Information Systems Security Professional (CISSP)

certleader.com

Q1. Following the completion of a network security assessment, which of the following can BEST be demonstrated? 

A. The effectiveness of controls can be accurately measured 

B. A penetration test of the network will fail 

C. The network is compliant to industry standards 

D. All unpatched vulnerabilities have been identified 

Answer:

Q2. Refer.to the information below to answer the question. 

An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have been tightly integrated into normal IT operations and are not separate and distinct roles. 

Which of the following will indicate where the IT budget is BEST allocated during this time? 

A. Policies 

B. Frameworks 

C. Metrics 

D. Guidelines 

Answer:

Q3. Data leakage of sensitive information is MOST often.concealed.by which of the following? 

A. Secure Sockets Layer (SSL).

B. Secure Hash Algorithm (SHA) 

C. Wired Equivalent Privacy (WEP) 

D. Secure Post Office Protocol (POP) 

Answer:

Q4. Which of the following BEST describes Recovery Time Objective (RTO)? 

A. Time of data validation after disaster 

B. Time of data restoration from backup after disaster 

C. Time of application resumption after disaster 

D. Time of application verification after disaster 

Answer:

Q5. What would be the PRIMARY concern when designing and coordinating a security assessment for an Automatic Teller Machine (ATM) system? 

A. Physical access to the electronic hardware 

B. Regularly scheduled maintenance process 

C. Availability of the network connection 

D. Processing delays 

Answer:

Q6. What is the MOST important reason to configure unique user IDs? 

A. Supporting accountability 

B. Reducing authentication errors 

C. Preventing password compromise 

D. Supporting Single Sign On (SSO) 

Answer:

Q7. Why MUST a Kerberos server be well protected from unauthorized access? 

A. It contains the keys of all clients. 

B. It always operates at root privilege. 

C. It contains all the tickets for services. 

D. It contains the Internet Protocol (IP) address of all network entities. 

Answer:

Q8. Which of the following is a security limitation of File Transfer Protocol (FTP)? 

A. Passive FTP is not compatible with web browsers. 

B. Anonymous access is allowed. 

C. FTP uses Transmission Control Protocol (TCP) ports 20 and 21. 

D. Authentication is not encrypted. 

Answer:

Q9. DRAG DROP 

In which order, from MOST to LEAST impacted, does user awareness training reduce the occurrence of the events below?.

Answer:  

Q10. An engineer in a software company has created a virus creation tool. The tool can generate thousands of polymorphic viruses. The engineer is planning to use the tool in a controlled environment to test the company's next generation virus scanning software. Which would BEST describe the behavior of the engineer and why? 

A. The behavior is ethical because the tool will be used to create a better virus scanner. 

B. The behavior is ethical because any experienced programmer could create such a tool. 

C. The behavior is not ethical because creating any kind of virus is bad. 

D. The behavior is not ethical because such.a tool could be leaked on the Internet. 

Answer: