ISC2 Certified Information Systems Security Professional483 questions across 49 pages are complete and free, with no account or card.
483 questions in this bank
Free access · progress saved on this device
A company needs to provide shared access of sensitive data on a cloud storage to external business partners. Which of the following identity models is the BEST to blind identity providers (IdP) and relying parties (RP) so that subscriber lists of other parties are not disclosed?
Answer: A
A network security engineer needs to ensure that a security solution analyzes traffic for protocol manipulation and various sorts of common attacks. In addition, all Uniform Resource Locator (URL) traffic must be inspected and users prevented from browsing inappropriate websites. Which of the following solutions should be implemented to enable administrators the capability to analyze traffic, blacklist external sites, and log user traffic for later analysis?
Answer: A
From a CISSP perspective, the solution that should be implemented to enable administrators the capability to analyze traffic, blacklist external sites, and log user traffic for later analysis is an Application-Level Proxy. An Application-Level Proxy operates at the application layer of the OSI model, allowing for deep inspection of network traffic. It can analyze traffic for protocol manipulation and various sorts of common attacks, while also allowing administrators to blacklist external sites and log user traffic for later analysis. Intrusion detection systems (IDS) are designed to detect and alert on malicious activity on the network, but they do not offer the same level of traffic analysis or control as an Application-Level Proxy. Host-based firewalls are designed to protect individual hosts from network attacks, but they do not offer the same level of network-wide control as a proxy. Circuit-level proxies do not offer the same level of traffic analysis or control as an Application-Level Proxy.
Source: Adapted from community discussion — 74gjd_37
A security professional needs to find a secure and efficient method of encrypting data on an endpoint. Which solution includes a root key?
Answer: B
What is the PRIMARY consideration when testing industrial control systems (ICS) for security weaknesses?
Answer: C
The very fact of testing/scanning ICS devices could cause them problems. Also, they are not always hard to get to so D does not apply all the time.
Source: Adapted from community discussion — Boats
Which combination of cryptographic algorithms are compliant with Federal Information Processing Standard (FIPS) Publication 140-2 for non-legacy systems?
Answer: A
The security team plans on using automated account reconciliation in the corporate user access review process. Which of the following must be implemented for the BEST results with fewest errors when running the audit?
Answer: D
The security team's plan to use automated account reconciliation in the corporate user access review process is likely to be most effective and have the fewest errors if they implement clear provisioning policies. This is because clear provisioning policies outline the specific roles, responsibilities, and procedures for granting, modifying, and revoking user access to systems and resources. By clearly defining these policies, the security team can ensure that the automated account reconciliation process is accurately and consistently applied to all user accounts. This will help to reduce the risk of errors and ensure that the audit process is thorough and effective.
Source: Adapted from community discussion — DJOEK
Within a large organization, what business unit is BEST positioned to initiate provisioning and deprovisioning of user accounts?
Answer: C
In THORS questions it was similar question and the answer was IT Administrator. Reason that HR doesnt touch creaetion of IT accounts. Now it is HT as correct answer... How can I answer correctly???
Source: Adapted from community discussion — suspense
In the common criteria, which of the following is a formal document that expresses an implementation-independent set of security requirements?
Answer: C
The Common Criteria process is based on two key elements: protection profiles and security targets. Protection profiles (PPs) specify for a product that is to be evaluated (the TOE) the security requirements and protections, which are considered the security desires, or the “I want,” from a customer. Security targets (STs) specify the claims of security from the vendor that are built into a TOE. STs are considered the implemented security measures, or the “I will provide,” from the vendor.
Source: Adapted from community discussion — DeepCyber
Which of the following is an example of a vulnerability of full-disk encryption (FDE)?
Answer: D
D. Data at rest has been compromised when the user has authenticated to the device. Full-disk encryption typically protects data when the device is powered off or at rest. However, if an attacker gains access to the device while it's running and the user has authenticated to the device (e.g., logged in), the data may be vulnerable. This is because FDE generally decrypts the data when the user is authenticated and using the device, making it susceptible to compromise if the device is compromised while in use.
Source: Adapted from community discussion — Soleandheel
What is the FIRST step in reducing the exposure of a network to Internet Control Message Protocol (ICMP) based attacks?
Answer: A
CISSP Official Study Guide pg 824 " Active Response Active responses can modify the environment using several different methods. Typical responses include modifying firewall ACLs to block traffic based on ports, protocols, and source addresses, and even disabling all communications over specific cable segments. For example, if an IDS detects a SYN flood attack from a single IP address, the IDS can change the ACL to block all traffic from this IP address. Similarly, if the IDS detects a ping flood attack from multiple IP addresses, it can change the ACL to block all ICMP traffic."
Source: Adapted from community discussion — RVoigt
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISSP practice, question 181. 483 questions available.
Version 1.0.0. How we source questions