CISSP practice questions 341–350

1. Question 341 · 483 in bank

   Which of the following is the MOST effective corrective control to minimize the effects of a physical intrusion?

   • ARapid response by guards or police to apprehend a possible intruder
   • BSounding a loud alarm to frighten away a possible intruder
   • CAutomatic videotaping of a possible intrusion
   • DActivating bright lighting to frighten away a possible intruder

   Show answer

   Answer: A

   Next question

2. Question 342 · 483 in bank

   Which of the following are the three MAIN categories of security controls?

   • APreventative, corrective, detective
   • BAdministrative, technical, physical
   • CCorrective, detective, recovery
   • DConfidentiality, integrity, availability

   Show answer

   Answer: B

   Next question

3. Question 343 · 483 in bank

   Which is the PRIMARY mechanism for providing the workforce with the information needed to protect an agency's vital information resources?

   • AImplementation of access provisioning process for coordinating the creation of user accounts
   • BIncorporating security awareness and training as part of the overall information security program
   • CAn information technology (IT) security policy to preserve the confidentiality, integrity, and availability of systems
   • DExecution of periodic security and privacy assessments to the organization

   Show answer

   Answer: B

   Next question

4. Question 344 · 483 in bank

   Which of the following is considered the FIRST step when designing an internal security control assessment?

   • ACreate a plan based on comprehensive knowledge of known breaches.
   • BCreate a plan based on reconnaissance of the organization's infrastructure.
   • CCreate a plan based on a recognized framework of known controls.
   • DCreate a plan based on recent vulnerability scans of the systems in question.

   Show answer

   Answer: C

   Next question

5. Question 345 · 483 in bank

   The Open Web Application Security Project's (OWASP) Software Assurance Maturity Model (SAMM) allows organizations to implement a flexible software security strategy to measure organizational impact based on what risk management aspect?

   • ARisk exception
   • BRisk tolerance
   • CRisk treatment
   • DRisk response

   Show answer

   Answer: B

   Next question

6. Question 346 · 483 in bank

   What is the PRIMARY reason that a bit-level copy is more desirable than a file-level copy when replicating a hard drives contents for an e-discovery investigation?

   • AThe corruption of files is less likely.
   • BFiles that have been deleted will be transferred.
   • CThe file and directory structure is retained.
   • DFile-level security settings will be preserved.

   Show answer

   Answer: B

   Next question

7. Question 347 · 483 in bank

   An organization outgrew its internal data center and is evaluating third-party hosting facilities. In this evaluation, which of the following is a PRIMARY factor for selection?

   • AFacility provides an acceptable level of risk
   • BFacility provides disaster recovery (DR) services
   • CFacility has physical access protection measures
   • DFacility provides the most cost-effective solution

   Show answer

   Answer: A

   Next question

8. Question 348 · 483 in bank

   A large manufacturing organization arranges to buy an industrial machine system to produce a new line of products. The system includes software provided to the vendor by a third-party organization. The financial risk to the manufacturing organization starting production is high. What step should the manufacturing organization take to minimize its financial risk in the new venture prior to the purchase?

   • ARequire that the software be thoroughly tested by an accredited independent software testing company.
   • BHire a performance tester to execute offline tests on a system.
   • CCalculate the possible loss in revenue to the organization due to software bugs and vulnerabilities, and compare that to the system's overall price.
   • DPlace the machine behind a Layer 3 firewall.

   Show answer

   Answer: A

   Next question

9. Question 349 · 483 in bank

   Which of the following is the BEST method a security practitioner can use to ensure that systems and sub-systems gracefully handle invalid input?

   • AUnit testing
   • BAcceptance testing
   • CIntegration testing
   • DNegative testing

   Show answer

   Answer: D

   Next question

10. Question 350 · 483 in bank

    Commercial off-the-shelf (COTS) software presents which of the following additional security concerns?

    • AVendors take on the liability for COTS software vulnerabilities.
    • BIn-house developed software is inherently less secure.
    • CCOTS software is inherently less secure.
    • DExploits for COTS software are well documented and publicly available.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 341. 483 questions available.