CISSP practice questions 291–300

1. Question 291 · 483 in bank

   Which of the following types of firewall only examines the "handshaking" between packets before forwarding traffic?

   • AProxy firewalls
   • BCircuit-level firewalls
   • CNetwork Address Translation (NAT) firewalls
   • DHost-based firewalls

   Show answer

   Answer: B

   Next question

2. Question 292 · 483 in bank

   What is a use for mandatory access control (MAC)?

   • AAllows for mandatory user identity and passwords based on sensitivity
   • BAllows for mandatory system administrator access control over objects
   • CAllows for labeling of sensitive user accounts for access control
   • DAllows for object security based on sensitivity represented by a label

   Show answer

   Answer: D

   Next question

3. Question 293 · 483 in bank

   An organization has developed a way for customers to share information from their wearable devices with each other. Unfortunately, the users were not informed as to what information collected would be shared. What technical controls should be put in place to remedy the privacy issue while still trying to accomplish the organization's business goals?

   • AShare only what the organization decides is best.
   • BStop sharing data with the other users.
   • CDefault the user to not share any information.
   • DInform the user of the sharing feature changes after implemented.

   Show answer

   Answer: C

   Next question

4. Question 294 · 483 in bank

   Which of the following system components enforces access controls on an object?

   • ASecurity perimeter
   • BAccess control matrix
   • CTrusted domain
   • DReference monitor

   Show answer

   Answer: D

   Next question

5. Question 295 · 483 in bank

   In setting expectations when reviewing the results of a security test, which of the following statements is MOST important to convey to reviewers?

   • AThe accuracy of testing results can be greatly improved if the target(s) are properly hardened.
   • BThe results of the tests represent a point-in-time assessment of the target(s).
   • CThe deficiencies identified can be corrected immediately.
   • DThe target's security posture cannot be further compromised.

   Show answer

   Answer: B

   Next question

6. Question 296 · 483 in bank

   What is the benefit of an operating system (OS) feature that is designed to prevent an application from executing code from a non-executable memory region?

   • AIdentifies which security patches still need to be installed on the system
   • BReduces the risk of polymorphic viruses from encrypting their payload
   • CStops memory resident viruses from propagating their payload
   • DHelps prevent certain exploits that store code in buffers

   Show answer

   Answer: D

   Next question

7. Question 297 · 483 in bank

   What is the overall goal of software security testing?

   • AIdentifying the key security features of the software
   • BEnsuring all software functions perform as specified
   • CReducing vulnerabilities within a software system
   • DMaking software development more agile

   Show answer

   Answer: C

   Next question

8. Question 298 · 483 in bank

   Which of the following implementations will achieve high availability in a website?

   • ADisk mirroring of the web server with redundant disk drives in a hardened data center
   • BDisk striping of the web server hard drives and large amounts of bandwidth
   • CMultiple geographically dispersed web servers that are configured for failover
   • DMultiple Domain Name System (DNS) entries resolving to the same web server and large amounts of bandwidth

   Show answer

   Answer: C

   Next question

9. Question 299 · 483 in bank

   Which of the following is an important design feature for the outer door of a mantrap?

   • AAllow it to be opened by an alarmed emergency button.
   • BDo not allow anyone to enter it alone.
   • CDo not allow it to be observed by closed-circuit television (CCTV) cameras.
   • DAllow it be opened when the inner door of the mantrap is also open.

   Show answer

   Answer: A

   Next question

10. Question 300 · 483 in bank

    Which of the following is the MOST important rule for digital investigations?

    • AEnsure original data is never modified.
    • BEnsure systems are powered on.
    • CEnsure event logs are rotated.
    • DEnsure individual privacy is protected.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 291. 483 questions available.