CISSP practice questions 11–20

1. Question 11 · 483 in bank

   Which organizational department is ultimately responsible for information governance related to e-mail and other e-records?

   • ALegal
   • BAudit
   • CCompliance
   • DSecurity

   Show answer

   Answer: A

   Explanation

   A. Legal. The legal department is ultimately responsible for information governance related to e-mail and other electronic records within an organization. This responsibility includes establishing policies, procedures, and guidelines for the proper management, retention, and disposal of electronic records in compliance with applicable laws, regulations, and industry standards. The legal department ensures that the organization maintains legal and regulatory compliance regarding e-records, including e-mail communications. They also handle any legal matters related to e-records, such as e-discovery requests or litigation involving electronic evidence.

   Source: Adapted from community discussion — Bach1968

   Next question

2. Question 12 · 483 in bank

   What process facilitates the balance of operational and economic costs of protective measures with gains in mission capability?

   • APerformance testing
   • BRisk assessment
   • CSecurity audit
   • DRisk management

   Show answer

   Answer: D

   Next question

3. Question 13 · 483 in bank

   A cloud service provider requires its customer organizations to enable maximum audit logging for its data storage service and to retain the logs for the period of three months. The audit logging gene has extremely high amount of logs. What is the MOST appropriate strategy for the log retention?

   • AKeep all logs in an online storage.
   • BKeep last week's logs in an online storage and the rest in an offline storage.
   • CKeep last week's logs in an online storage and the rest in a near-line storage.
   • DKeep all logs in an offline storage.

   Show answer

   Answer: C

   Explanation

   B is right Near line is ideal if you want to access the data (at least once a month) but for pure retention purpose, off-line is cost-effective option

   Source: Adapted from community discussion — dev46

   Next question

4. Question 14 · 483 in bank

   Clothing retailer employees are provisioned with user accounts that provide access to resources at partner businesses. All partner businesses use common identity and access management (IAM) protocols and differing technologies. Under the Extended Identity principle, what is the process flow between partner businesses to allow this IAM action?

   • AClothing retailer acts as User Self Service, confirms identity of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to services.
   • BClothing retailer acts as identity provider (IdP), confirms identity of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to services.
   • CClothing retailer acts as Service Provider, confirms identity of user using industry standards, then sends credentials to partner businesses that act as an identity provider (IdP) and allows access to resources.
   • DClothing retailer acts as Access Control Provider, confirms access of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to resources.

   Show answer

   Answer: B

   Next question

5. Question 15 · 483 in bank

   In Federated Identity Management (FIM), which of the following represents the concept of federation?

   • ACollection, maintenance, and deactivation of user objects and attributes in one or more systems, directories or applications
   • BCollection of information logically grouped into a single entity
   • CCollection of information for common identities in a system
   • DCollection of domains that have established trust among themselves

   Show answer

   Answer: D

   Explanation

   CISSP All-In-One Exam Guide 9th Edition: ! User provisioning refers to the creation, maintenance, and deactivation of user objects and attributes as they exist in one or more systems, directories, or applications, in response to business processes. User provisioning software may include one or more of the following components: change propagation, self-service workflow, consolidated user administration, delegated user administration, and federated change control. User objects may represent employees, contractors, vendors, partners, customers, or other recipients of a service. Services may include e-mail, access to a database, access to a file server or database, and so on. ! So option A is a definition of User provisioning.

   Source: Adapted from community discussion — oudmaster

   Next question

6. Question 16 · 483 in bank

   Which of the following statements BEST describes least privilege principle in a cloud environment?

   • AA single cloud administrator is configured to access core functions.
   • BInternet traffic is inspected for all incoming and outgoing packets.
   • CRouting configurations are regularly updated with the latest routes.
   • DNetwork segments remain private if unneeded to access the internet.

   Show answer

   Answer: D

   Next question

7. Question 17 · 483 in bank

   Which of the following is an indicator that a company's new user security awareness training module has been effective?

   • AThere are more secure connections to internal e-mail servers.
   • BMore incidents of phishing attempts are being reported.
   • CFewer incidents of phishing attempts are being reported.
   • DThere are more secure connections to the internal database servers.

   Show answer

   Answer: B

   Explanation

   Tricky options B & C - I ended up choosing C, but B is right The whole idea of awareness training is to change user behaviour. When more incidents are reported, it's a good indicator that users are security aware and taking the right action

   Source: Adapted from community discussion — dev46

   Next question

8. Question 18 · 483 in bank

   An organization is trying to secure instant messaging (IM) communications through its network perimeter. Which of the following is the MOST significant challenge?

   • AIM clients can interoperate between multiple vendors.
   • BIM clients can run as executables that do not require installation.
   • CIM clients can utilize random port numbers.
   • DIM clients can run without administrator privileges.

   Show answer

   Answer: C

   Explanation

   C. IM clients can utilize random port numbers. Through the perimeter lends me to think they are asking for firewall ports to open

   Source: Adapted from community discussion — stickerbush1970

   Next question

9. Question 19 · 483 in bank

   Using the cipher text and resultant cleartext message to derive the monoalphabetic cipher key is an example of which method of cryptanalytic attack?

   • AKnown-plaintext attack
   • BCiphertext-only attack
   • CFrequency analysis
   • DProbable-plaintext attack

   Show answer

   Answer: A

   Explanation

   A. Known-plaintext attack In a known-plaintext attack, the attacker has access to both the cipher text (encrypted message) and the corresponding cleartext (decrypted message). By analyzing the relationship between the two, the attacker attempts to derive the encryption key or discover vulnerabilities in the encryption algorithm. In this case, using the cipher text and the resultant cleartext message to derive the monoalphabetic cipher key falls under the category of a known-plaintext attack. The attacker can compare the pairs of known cipher text and cleartext to deduce the correspondence between specific characters or patterns, which can lead to the recovery of the encryption key.

   Source: Adapted from community discussion — Bach1968

   Next question

10. Question 20 · 483 in bank

    Which Wide Area Network (WAN) technology requires the first router in the path to determine the full path the packet will travel, removing the need for other routers in the path to make independent determinations?

    • ASynchronous Optical Networking (SONET)
    • BMultiprotocol Label Switching (MPLS)
    • CFiber Channel Over Ethernet (FCoE)
    • DSession Initiation Protocol (SIP)

    Show answer

    Answer: B

    Explanation

    "B" it is! Multiprotocol label switching (MPLS) is a technique for speeding up network connections that was first developed in the 1990s. The public Internet functions by forwarding packets from one router to the next until the packets reach their destination. MLPS, on the other hand, sends packets along predetermined network paths. Ideally, the result is that routers spend less time deciding where to forward each packet, and packets take the same path every time. Consider the process of planning a long drive. Instead of identifying which towns and cities one must drive through in order to reach the destination, it is usually more efficient to identify the roads that go in the correct direction. Similarly, MPLS identifies paths — network "roads" — rather than a series of intermediary destinations. https://www.cloudflare.com/learning/network-layer/what-is-mpls/

    Source: Adapted from community discussion — franbarpro

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 11. 483 questions available.