CISSP practice questions 221–230

1. Question 221 · 483 in bank

   Which of the following protection is provided when using a Virtual Private Network (VPN) with Authentication Header (AH)?

   • ASender non-repudiation
   • BMulti-factor authentication (MFA)
   • CPayload encryption
   • DSender confidentiality

   Show answer

   Answer: A

   Next question

2. Question 222 · 483 in bank

   An organization contracts with a consultant to perform a System Organization Control (SOC) 2 audit on their internal security controls. An auditor documents a finding a related to an Application Programming Interface (API) performing an action that is not aligned with the scope or objective of the system. Which trust service principle would be MOST applicable in th is situation?

   • AConfidentiality
   • BProcessing Integrity
   • CSecurity
   • DAvailability

   Show answer

   Answer: B

   Next question

3. Question 223 · 483 in bank

   In which process MUST security be considered during the acquisition of new software?

   • ARequest for proposal (RFP)
   • BImplementation
   • CVendor selection
   • DContract negotiation

   Show answer

   Answer: A

   Next question

4. Question 224 · 483 in bank

   Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

   • AA network-based firewall is stateful, while a host-based firewall is stateless.
   • BA network-based firewall blocks network intrusions, while a host-based firewall blocks malware.
   • CA network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device.
   • DA network-based firewall verifies network traffic, while a host-based firewall verifies processes and applications.

   Show answer

   Answer: C

   Next question

5. Question 225 · 483 in bank

   Which of the following measures serves as the BEST means for protecting data on computers, smartphones, and external storage devices when traveling to high- risk countries?

   • AReview applicable destination country laws, forensically clean devices prior to travel, and only download sensitive data over a virtual private network (VPN) upon arriving at the destination.
   • BLeverage a Secure Socket Layer (SSL) connection over a virtual private network (VPN) to download sensitive data upon arriving at the destination.
   • CKeep laptops, external storage devices, and smartphones in the hotel room when not in use.
   • DUse multi-factor authentication (MFA) to gain access to data stored on laptops or external storage devices and biometric fingerprint access control mechanisms to unlock smartphones.

   Show answer

   Answer: A

   Next question

6. Question 226 · 483 in bank

   When network management is outsourced to third parties, which of the following is the MOST effective method of protecting critical data assets?

   • AConfirm that confidentiality agreements are signed
   • BEmploy strong access controls
   • CLog all activities associated with sensitive systems
   • DProvide links to security policies

   Show answer

   Answer: B

   Next question

7. Question 227 · 483 in bank

   Which of the following regulations dictates how data breaches are handled?

   • APayment Card Industry Data Security Standard (PCI-DSS)
   • BNational Institute of Standards and Technology (NIST)
   • CSarbanes-Oxley (SOX)
   • DGeneral Data Protection Regulation (GDPR)

   Show answer

   Answer: D

   Next question

8. Question 228 · 483 in bank

   In software development, developers should use which type of queries to prevent a Structured Query Language (SQL) injection?

   • AParameterised
   • BControlled
   • CDynamic
   • DStatic

   Show answer

   Answer: A

   Next question

9. Question 229 · 483 in bank

   Which type of access control includes a system that allows only users that are type=managers and department=sales to access employee records?

   • ARole-based access control (RBAC)
   • BAttribute-based access control (ABAC)
   • CDiscretionary access control (DAC)
   • DMandatory access control (MAC)

   Show answer

   Answer: B

   Next question

10. Question 230 · 483 in bank

    Which of the following examples is BEST to minimize the attack surface for a customer's private information?

    • AData masking
    • BAuthentication
    • CObfuscation
    • DCollection limitation

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 221. 483 questions available.