ISC2 Certified Information Systems Security Professional483 questions across 49 pages are complete and free, with no account or card.
483 questions in this bank
Free access · progress saved on this device
An information security professional is reviewing user access controls on a customer-facing application. The application must have multi-factor authentication (MFA) in place. The application currently requires a username and password to login. Which of the following options would BEST implement MFA?
Answer: D
Which of the following is a MAJOR consideration in implementing a Voice over Internet Protocol (VoIP) network?
Answer: C
During testing, where are the requirements to inform parent organizations, law enforcement, and a computer incident response team documented?
Answer: B
The security architect has been mandated to assess the security of various brands of mobile devices. At what phase of the product lifecycle would this be MOST likely to occur?
Answer: D
Which of the following statements is MOST accurate regarding information assets?
Answer: B
Which of the following attack types can be used to compromise the integrity of data during transmission?
Answer: B
A malicious user gains access to unprotected directories on a web server. Which of the following is MOST likely the cause for this information disclosure?
Answer: B
When reviewing the security logs, the password shown for an administrative login event was ' OR ' '1'='1' --. This is an example of which of the following kinds of attack?
Answer: A
Which is the BEST control to meet the Statement on Standards for Attestation Engagements 18 (SSAE-18) confidentiality category?
Answer: B
Which of the following BEST describes why software assurance is critical in helping prevent an increase in business and mission risk for an organization?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISSP practice, question 301. 483 questions available.
Version 1.0.0. How we source questions