Question 111 · 483 in bank
What is the MOST common security risk of a mobile device?
Show answer
Answer: D
ISC2 Certified Information Systems Security Professional483 questions across 49 pages are complete and free, with no account or card.
483 questions in this bank
Free access · progress saved on this device
What is the MOST common security risk of a mobile device?
Answer: D
Which factors MUST be considered when classifying information and supporting assets for risk management, legal discovery, and compliance?
Answer: C
From Google: Data stewardship is the collection of practices that ensure an organization's data is accessible, usable, safe, and trusted.
Source: Adapted from community discussion — franbarpro
What level of Redundant Array of Independent Disks (RAID) is configured PRIMARILY for high-performance data reads and writes?
Answer: A
The Chief Information Security Officer (CISO) of a small organization is making a case for building a security operations center (SOC). While debating between an in-house, fully outsourced, or a hybrid capability, which of the following would be the MAIN consideration, regardless of the model?
Answer: B
The scope and service catalog of a SOC defines the specific security services that the SOC will provide. This includes threat monitoring, incident response, vulnerability management, and other security-related activities. The scope and service catalog will also determine the required headcount, skills, and tools and technologies. Regardless of whether the SOC is in-house, fully outsourced, or a hybrid, the scope and service catalog will be the main consideration. This is because the scope and service catalog will determine the overall cost of the SOC, as well as the level of security that the SOC can provide.
Source: Adapted from community discussion — BoZT
What type of risk is related to the sequences of value-adding and managerial activities undertaken in an organization?
Answer: D
An organization would like to ensure that all new users have a predefined departmental access template applied upon creation. The organization would also like additional access for users to be granted on a per-project basis. What type of user access administration is BEST suited to meet the organization's needs?
Answer: B
CISSP Official Student Guide pg 169 "Hybrid: In a hybrid approach, centralized control is exercised for some information and decentralized control is allowed for other information. One typical arrangement is that central administration is responsible for the broadest and most basic access, and the creators/owners of files control the types of access or users’ abilities for the files under their control. For example, when a new employee is hired into a department, a central administrator might provide the employee with access permissions based on the functional element they are assigned to, the job classification and the specific task they were hired to work on. The employee might have readonly access to an organization-wide SharePoint document library and to project status report files but read-and-write privileges to his department’s weekly activities report. Also, if the employee leaves a project, the project manager can easily close that employee’s access to that file."
Source: Adapted from community discussion — RVoigt
International bodies established a regulatory scheme that defines how weapons are exchanged between the signatories. It also addresses cyber weapons, including malicious software, Command and Control (C2) software, and internet surveillance software. This is a description of which of the following?
Answer: C
Which of the following is a secure design principle for a new product?
Answer: C
Fault tolerance is (C) is correct because it covers the availability aspect. Obfuscation is not a design principle and the rest of them don't make sense!
Source: Adapted from community discussion — projtfer
An organization has implemented a protection strategy to secure the network from unauthorized external access. The new Chief Information Security Officer (CISO) wants to increase security by better protecting the network from unauthorized internal access. Which Network Access Control (NAC) capability BEST meets this objective?
Answer: A
What is the PRIMARY benefit of relying on Security Content Automation Protocol (SCAP)?
Answer: C
Answer is c "The Security Content Automation Protocol (SCAP) is a method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation of systems deployed in an organization," https://en.wikipedia.org/wiki/Security_Content_Automation_Protocol
Source: Adapted from community discussion — JAckThePip
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISSP practice, question 111. 483 questions available.
Version 1.0.0. How we source questions