ISC2 Certified Information Systems Security Professional483 questions across 49 pages are complete and free, with no account or card.
483 questions in this bank
Free access · progress saved on this device
An organization is setting a security assessment scope with the goal of developing a Security Management Program (SMP). The next step is to select an approach for conducting the risk assessment. Which of the following approaches is MOST effective for the SMP?
Answer: B
Which of the following should be done at a disaster site before any item is removed, repaired, or replaced?
Answer: C
From a CISSP perspective, it is important to document the state of the disaster site before any item is removed, repaired, or replaced. This documentation, in the form of photographs, can be used as evidence in the event of an investigation or lawsuit.
Source: Adapted from community discussion — trojix
Which technique helps system designers consider potential security concerns of their systems and applications?
Answer: A
When designing a new Voice over Internet Protocol (VoIP) network, an organization's top concern is preventing unauthorized users accessing the VoIP network. Which of the following will BEST help secure the VoIP network?
Answer: D
https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/concept/802-1x-pnac-voip-understanding-mx-series.html When you use Voice over IP (VoIP), you can connect IP telephones to the router and configure IEEE 802.1X authentication for 802.1X-compatible IP telephones. Starting with Junos OS Release 14.2, 802.1X authentication provides network edge security, protecting Ethernet LANs from unauthorized user access. When VoIP is used with 802.1X, the RADIUS server authenticates the phone. You can configure 802.1X authentication to work with VoIP in multiple supplicant or single supplicant mode. In multiple-supplicant mode, the 802.1X process allows multiple supplicants to connect to the interface. The BEST option to secure the VoIP network is option D, 802.1x. This is a standard for port-based network access control that provides authentication and authorization to devices trying to connect to the network. By implementing 802.1x, only authorized devices can connect to the VoIP network, preventing unauthorized access.
Source: Adapted from community discussion — 74gjd_37
A security professional can BEST mitigate the risk of using a Commercial Off-The-Shelf (COTS) solution by deploying the application with which of the following controls in place?
Answer: D
A user's credential for an application is stored in a relational database. Which control protects the confidentiality of the credential while it is stored?
Answer: A
Its absurd that D is listed as the correct answer, when the second part of the answer says "embed an encryption key in the application."
Source: Adapted from community discussion — izaman2022
Which of the following BEST describes centralized identity management?
Answer: D
Which of the following frameworks provides vulnerability metrics and characteristics to support the National Vulnerability Database (NVD)?
Answer: C
C is Correct The Common Vulnerability Scoring System (CVSS) is an open framework for communicating the characteristics and severity of software vulnerabilities. CVSS consists of three metric groups: Base, Temporal, and Environmental https://nvd.nist.gov/vuln-metrics/cvss
Source: Adapted from community discussion — explorer3
What is the MOST significant benefit of role-based access control (RBAC)?
Answer: D
A security architect is reviewing plans for an application with a Recovery Point Objective (RPO) of 15 minutes. The current design has all of the application infrastructure located within one co-location data center. Which security principle is the architect currently assessing?
Answer: B
I chose C but I can see why B is the correct answer. The keyword is security principle. Availability is a security principle (C I A) and would include redundancy. A and D are not security principles
Source: Adapted from community discussion — izaman2022
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISSP practice, question 101. 483 questions available.
Version 1.0.0. How we source questions