CISSP practice questions 271–280

1. Question 271 · 483 in bank

   A security professional has reviewed a recent site assessment and has noted that a server room on the second floor of a building has Heating, Ventilation, and Air Conditioning (HVAC) intakes on the ground level that have ultraviolet light fi lters installed, Aero-K Fire suppression in the server room, and pre-action fire suppression on floors above the server room. Which of the following changes can the security professional recommend to reduce risk associated with these conditions?

   • ARemove the ultraviolet light filters on the HVAC intake and replace the fire suppression system on the upper floors with a dry system
   • BElevate the HVAC intake by constructing a plenum or external shaft over it and convert the server room fire suppression to a pre-action system
   • CAdd additional ultraviolet light fi lters to the HVAC intake supply and return ducts and change server room fire suppression to FM-200
   • DApply additional physical security around the HVAC intakes and update upper floor fire suppression to FM-200

   Show answer

   Answer: D

   Next question

2. Question 272 · 483 in bank

   Which of the following is the MOST common use of the Online Certificate Status Protocol (OCSP)?

   • ATo verify the validity of an X.509 digital certificate
   • BTo obtain the expiration date of an X.509 digital certificate
   • CTo obtain the revocation status of an X.509 digital certificate
   • DTo obtain the author name of an X.509 digital certificate

   Show answer

   Answer: C

   Next question

3. Question 273 · 483 in bank

   A security professional has been assigned to assess a web application. The assessment report recommends switching to Security Assertion Markup Language (SAML). What is the PRIMARY security benefit in switching to SAML?

   • AIt enables single sign-on (SSO) for web applications.
   • BIt uses Transport Layer Security (TLS) to address confidentiality.
   • CIt limits unnecessary data entry on web forms.
   • DThe users' password is not passed during authentication.

   Show answer

   Answer: D

   Next question

4. Question 274 · 483 in bank

   An organization purchased a commercial off-the-shelf (COTS) software several years ago. The information technology (IT) Director has decided to migrate the application into the cloud, but is concerned about the application security of the software in the organization's dedicated environment with a cloud service provider. What is the BEST way to prevent and correct the software's security weaknesses?

   • AFollow the software end-of-life schedule
   • BImplement a dedicated COTS sandbox environment
   • CTransfer the risk to the cloud service provider
   • DExamine the software updating and patching process

   Show answer

   Answer: D

   Next question

5. Question 275 · 483 in bank

   What type of database attack would allow a customer service employee to determine quarterly sales results before they are publicly announced?

   • AInference
   • BAggregation
   • CPolyinstantiation
   • DData mining

   Show answer

   Answer: A

   Next question

6. Question 276 · 483 in bank

   In a multi-tenant cloud environment, what approach will secure logical access to assets?

   • AControlled configuration management (CM)
   • BTransparency/Auditability of administrative access
   • CVirtual private cloud (VPC)
   • DHybrid cloud

   Show answer

   Answer: C

   Next question

7. Question 277 · 483 in bank

   An information technology (IT) employee who travels frequently to various countries remotely connects to an organization's resources to troubleshoot problems. Which of the following solutions BEST serves as a secure control mechanism to meet the organization's requirements?

   • AInstall a third-party screen sharing solution that provides remote connection from a public website.
   • BInstall a bastion host in the demilitarized zone (DMZ) and allow multi-factor authentication (MFA) access.
   • CImplement a Dynamic Domain Name Services (DONS) account to initiate a virtual private network (VPN) using the DONS record.
   • DUpdate the firewall rules to include the static Internet Protocol (IP) addresses of the locations where the employee connects from.

   Show answer

   Answer: B

   Next question

8. Question 278 · 483 in bank

   Which of the following is the BEST way to determine the success of a patch management process?

   • AChange management
   • BConfiguration management (CM)
   • CAnalysis and impact assessment
   • DAuditing and assessment

   Show answer

   Answer: D

   Next question

9. Question 279 · 483 in bank

   An organization has discovered that organizational data is posted by employees to data storage accessible to the general public. What is the PRIMARY step an organization must take to ensure data is properly protected from public release?

   • AImplement a user reporting policy.
   • BImplement a data encryption policy.
   • CImplement a user training policy.
   • DImplement a data classification policy.

   Show answer

   Answer: D

   Next question

10. Question 280 · 483 in bank

    A security engineer is required to integrate security into a software project that is implemented by small groups that quickly, continuously, and independently develop, test, and deploy code to the cloud. The engineer will MOST likely integrate with which software development process?

    • ADevops Integrated Product Team (IPT)
    • BStructured Waterfall Programming Development
    • CService-oriented architecture (SOA)
    • DSpiral Methodology

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 271. 483 questions available.