CISSP practice questions 311–320

1. Question 311 · 483 in bank

   An employee's home address should be categorized according to which of the following references?

   • AThe consent form terms and conditions signed by employees
   • BAn organization security plan for human resources
   • CExisting employee data classifications
   • DThe organization's data classification model

   Show answer

   Answer: D

   Next question

2. Question 312 · 483 in bank

   Which of the following activities should a forensic examiner perform FIRST when determining the priority of digital evidence collection at a crime scene?

   • AGather physical evidence.
   • BAssign responsibilities to personnel on the scene.
   • CEstablish a list of files to examine.
   • DEstablish order of volatility.

   Show answer

   Answer: D

   Next question

3. Question 313 · 483 in bank

   Which software defined networking (SDN) architectural component is responsible for translating network requirements?

   • ASDN Controller
   • BSDN Datapath
   • CSDN Northbound Interfaces
   • DSDN Application

   Show answer

   Answer: A

   Next question

4. Question 314 · 483 in bank

   An internal audit for an organization recently identified malicious actions by a user account. Upon further investigation, it was determined the offending user account was used by multiple people at multiple locations simultaneously for various services and applications. What is the BEST method to prevent this problem in the future?

   • AEnsure each user has their own unique account.
   • BAllow several users to share a generic account.
   • CEnsure the security information and event management (SIEM) is set to alert.
   • DInform users only one user should be using the account at a time.

   Show answer

   Answer: A

   Next question

5. Question 315 · 483 in bank

   Who should perform the design review to uncover security design flaws as part of the Software Development Life Cycle (SDLC)?

   • AA security subject matter expert (SME)
   • BA developer subject matter expert (SME)
   • CThe business owner
   • DThe application owner

   Show answer

   Answer: A

   Next question

6. Question 316 · 483 in bank

   The initial security categorization should be done early in the system life cycle and should be reviewed periodically. Why is it important for this to be done correctly?

   • AIt determines the functional and operational requirements.
   • BIt determines the security requirements.
   • CIt affects other steps in the certification and accreditation process.
   • DThe system engineering process works with selected security controls.

   Show answer

   Answer: B

   Next question

7. Question 317 · 483 in bank

   When designing a Cyber-Physical System (CPS), which of the following should be a security practitioner's first consideration?

   • ADetection of sophisticated attackers
   • BTopology of the network used for the system
   • CRisk assessment of the system
   • DResiliency of the system

   Show answer

   Answer: C

   Next question

8. Question 318 · 483 in bank

   Which of the following events prompts a review of the disaster recovery plan (DRP)?

   • AChange in senior management
   • BCompletion of the security policy review
   • COrganizational merger
   • DNew members added to the steering committee

   Show answer

   Answer: C

   Next question

9. Question 319 · 483 in bank

   A user is allowed to access the file labeled "Financial Forecast," but only between 9:00 a.m. and 5:00 p.m., Monday through Friday. Which type of access mechanism should be used to accomplish this?

   • AMinimum access control
   • BLimited role-based access control (RBAC)
   • CAccess control list (ACL)
   • DRule-based access control

   Show answer

   Answer: D

   Next question

10. Question 320 · 483 in bank

    What is the benefit of using Network Admission Control (NAC)?

    • ANAC only supports Windows operating systems (OS).
    • BNAC supports validation of the endpoint's security posture prior to allowing the session to go into an authorized state.
    • CNAC can require the use of certificates, passwords, or a combination of both before allowing network admission.
    • DOperating system (OS) versions can be validated prior to allowing network access.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 311. 483 questions available.