CISSP practice questions 231–240

1. Question 231 · 483 in bank

   Which evidence collecting technique would be utilized when it is believed an attacker is employing a rootkit and a quick analysis is needed?

   • AForensic disk imaging
   • BLive response
   • CMemory collection
   • DMalware analysis

   Show answer

   Answer: B

   Next question

2. Question 232 · 483 in bank

   An application is used for funds transfers between an organization and a third-party. During a security audit, an auditor has found an issue with the business continuity disaster recovery policy and procedures for this application. Which of the following reports should the auditor file with the organization?

   • AStatement on Auditing Standards (SAS) 70-1
   • BStatement on Auditing Standards (SAS) 70
   • CService Organization Control (SOC) 1
   • DService Organization Control (SOC) 2

   Show answer

   Answer: D

   Next question

3. Question 233 · 483 in bank

   When determining data and information asset handling, regardless of the specific toolset being used, which of the following is one of the common components of big data?

   • ADistributed storage locations
   • BCentralized processing location
   • CDistributed data collection
   • DConsolidated data collection

   Show answer

   Answer: A

   Next question

4. Question 234 · 483 in bank

   A Chief Information Security Officer (CISO) of a firm which decided to migrate to cloud has been tasked with ensuring an optimal level of security. Which of the following would be the FIRST consideration?

   • AAnalyze the firm's applications and data repositories to determine the relevant control requirements.
   • BRequest a security risk assessment of the cloud vendor be completed by an independent third-party.
   • CDefine the cloud migration roadmap and set out which applications and data repositories should be moved into the cloud.
   • DEnsure that the contract between the cloud vendor and the firm clearly defines responsibilities for operating security controls.

   Show answer

   Answer: A

   Next question

5. Question 235 · 483 in bank

   Which of the following BEST describes the purpose of Border Gateway Protocol (BGP)?

   • AProvide Routing Information Protocol (RIP) version 2 advertisements to neighboring layer 3 devices.
   • BMaintain a list of network paths between internet routers.
   • CProvide firewall services to cloud-enabled applications.
   • DMaintain a list of efficient network paths between autonomous systems.

   Show answer

   Answer: D

   Next question

6. Question 236 · 483 in bank

   What is the BEST design for securing physical perimeter protection?

   • AClosed-circuit television (CCTV)
   • BBusiness continuity planning (BCP)
   • CBarriers, fences, gates, and walls
   • DCrime Prevention through Environmental Design (CPTED)

   Show answer

   Answer: D

   Next question

7. Question 237 · 483 in bank

   The security organization is looking for a solution that could help them determine with a strong level of confidence that attackers have breached their network. Which solution is MOST effective at discovering a successful network breach?

   • ADeveloping a sandbox
   • BInstalling an intrusion detection system (IDS)
   • CDeploying a honeypot
   • DInstalling an intrusion prevention system (IPS)

   Show answer

   Answer: C

   Next question

8. Question 238 · 483 in bank

   Which of the following is a benefit of implementing data-in-use controls?

   • AIf the data is lost, it must be decrypted to be opened.
   • BWhen the data is being viewed, it can only be printed by authorized users.
   • CWhen the data is being viewed, it can be accessed using secure protocols.
   • DIf the data is lost, it may not be accessible to unauthorized users.

   Show answer

   Answer: B

   Next question

9. Question 239 · 483 in bank

   When configuring Extensible Authentication Protocol (EAP) in a Voice over Internet Protocol (VoIP) network, which of the following authentication types is the MOST secure?

   • AEAP-Protected Extensible Authentication Protocol (PEAP)
   • BEAP-Transport Layer Security (TLS)
   • CEAP-Tunneled Transport Layer Security (TLS)
   • DEAP-Flexible Authentication via Secure Tunneling

   Show answer

   Answer: B

   Next question

10. Question 240 · 483 in bank

    Which of the following would be the BEST guideline to follow when attempting to avoid the exposure of sensitive data?

    • AMonitor mail servers for sensitive data being exfiltrated.
    • BEducate end-users on methods of attacks on sensitive data.
    • CEstablish report parameters for sensitive data.
    • DStore sensitive data only when necessary.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 231. 483 questions available.