CISSP practice questions 251–260

1. Question 251 · 483 in bank

   Which type of disaster recovery plan (DRP) testing carries the MOST operational risk?

   • ACutover
   • BParallel
   • CWalkthrough
   • DTabletop

   Show answer

   Answer: A

   Next question

2. Question 252 · 483 in bank

   Which of the following methods provides the MOST protection for user credentials?

   • AForms-based authentication
   • BSelf-registration
   • CBasic authentication
   • DDigest authentication

   Show answer

   Answer: D

   Next question

3. Question 253 · 483 in bank

   An organization is planning a penetration test that simulates the malicious actions of a former network administrator. What kind of penetration test is needed?

   • AFunctional test
   • BUnit test
   • CGrey box
   • DWhite box

   Show answer

   Answer: D

   Next question

4. Question 254 · 483 in bank

   How does Radio-Frequency Identification (RFID) assist with asset management?

   • AIt uses biometric information for system identification.
   • BIt uses two-factor authentication (2FA) for system identification.
   • CIt transmits unique serial numbers wirelessly.
   • DIt transmits unique Media Access Control (MAC) addresses wirelessly.

   Show answer

   Answer: C

   Next question

5. Question 255 · 483 in bank

   Which of the following is the FIRST step an organization's professional performs when defining a cyber-security program based upon industry standards?

   • AReview the past security assessments
   • BDefine the organization's objectives regarding security and risk mitigation
   • CMap the organization's current security practices to industry standards and frameworks
   • DSelect from a choice of security best practices

   Show answer

   Answer: B

   Next question

6. Question 256 · 483 in bank

   What is the MOST important criterion that needs to be adhered to during the data collection process of an active investigation?

   • AMaintaining the chain of custody
   • BCapturing an image of the system
   • COutlining all actions taken during the investigation
   • DComplying with the organization's security policy

   Show answer

   Answer: A

   Next question

7. Question 257 · 483 in bank

   Two computers, each with a single connection on the same physical 10 gigabit Ethernet network segment, need to communicate with each other. The first machine has a single Internet Protocol (IP) Classless Inter-Domain Routing (CIDR) address of 192.168.1.3/30 and the second machine has an IP/CIDR address 192.168.1.6/30. Which of the following is correct?

   • ASince each computer is on a different layer 3 network, traffic between the computers must be processed by a network bridge in order to communicate
   • BSince each computer is on the same layer 3 network, traffic between the computers may be processed by a network router in order to communicate
   • CSince each computer is on the same layer 3 network, traffic between the computers may be processed by a network bridge in order to communicate
   • DSince each computer is on a different layer 3 network, traffic between the computers must be processed by a network router in order to communicate

   Show answer

   Answer: D

   Next question

8. Question 258 · 483 in bank

   Security Software Development Life Cycle (SDLC) expects application code to be written in a consistent manner to allow ease of auditing and which of the following?

   • AProtecting
   • BCopying
   • CEnhancing
   • DExecuting

   Show answer

   Answer: C

   Next question

9. Question 259 · 483 in bank

   Which of the following is a risk matrix?

   • AA tool for determining risk management decisions for an activity or system.
   • BA database of risks associated with a specific information system.
   • CA two-dimensional picture of risk for organizations, products, projects, or other items of interest.
   • DA table of risk management factors for management to consider.

   Show answer

   Answer: C

   Next question

10. Question 260 · 483 in bank

    What part of an organization's strategic risk assessment MOST likely includes information on items affecting the success of the organization?

    • AThreat analysis
    • BVulnerability analysis
    • CKey Performance Indicator (KPI)
    • DKey Risk Indiaitor (KRI)

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 251. 483 questions available.