CISSP practice questions 371–380

1. Question 371 · 483 in bank

   Which of the following goals represents a modern shift in risk management according to National Institute of Standards and Technology (NIST)?

   • AProvide an improved mission accomplishment approach.
   • BFocus on operating environments that are changing, evolving, and full of emerging threats.
   • CEnable management to make well-informed risk-based decisions justifying security expenditure.
   • DSecure information technology (IT) systems that store, mass, or transmit organizational information.

   Show answer

   Answer: B

   Next question

2. Question 372 · 483 in bank

   Which of the following security tools monitors devices and records the information in a central database for further analysis?

   • AAntivirus
   • BHost-based intrusion detection system (HIDS)
   • CSecurity orchestration automation and response
   • DEndpoint detection and response (EDR)

   Show answer

   Answer: D

   Next question

3. Question 373 · 483 in bank

   In addition to life, protection of which of the following elements is MOST important when planning a data center site?

   • AData and hardware
   • BProperty and operations
   • CResources and reputation
   • DProfits and assets

   Show answer

   Answer: A

   Next question

4. Question 374 · 483 in bank

   Which of the following documents specifies services from the client's viewpoint?

   • ABusiness Impact analysis (BIA)
   • BService level agreement (SLA)
   • CService Level Requirement (SLR)
   • DService level report

   Show answer

   Answer: C

   Next question

5. Question 375 · 483 in bank

   Which of the following should be included in a good defense-in-depth strategy provided by object-oriented programming for software development?

   • APolymorphism
   • BInheritance
   • CPolyinstantiation
   • DEncapsulation

   Show answer

   Answer: D

   Next question

6. Question 376 · 483 in bank

   Which of the following is a key responsibility for a data steward assigned to manage an enterprise data lake?

   • AEnsure proper business definition, value, and usage of data collected and stored within the enterprise data lake.
   • BEnsure adequate security controls applied to the enterprise data lake.
   • CEnsure proper and identifiable data owners for each data element stored within an enterprise data lake.
   • DEnsure that any data passing within remit is being used in accordance with the rules and regulations of the business.

   Show answer

   Answer: A

   Next question

7. Question 377 · 483 in bank

   What is the FIRST step prior to executing a test of an organization's disaster recovery (DR) or business continuity plan (BCP)?

   • ADevelop clear evaluation criteria.
   • BIdentify key stakeholders.
   • CDevelop recommendations for disaster scenarios.
   • DIdentify potential failure points.

   Show answer

   Answer: A

   Next question

8. Question 378 · 483 in bank

   A breach investigation found a website was exploited through an open source component. What is the FIRST step in the process that could have prevented this breach?

   • AApplication whitelisting
   • BVulnerability remediation
   • CWeb application firewall (WAF)
   • DSoftware inventory

   Show answer

   Answer: D

   Next question

9. Question 379 · 483 in bank

   What security principle addresses the issue of "Security by Obscurity"?

   • AOpen design
   • BRole Based Access Control (RBAC)
   • CSegregation of duties (SoD)
   • DLeast privilege

   Show answer

   Answer: A

   Next question

10. Question 380 · 483 in bank

    What is the MOST important goal of conducting security assessments?

    • ATo align the security program with organizational risk appetite
    • BTo demonstrate proper function of security controls and processes to senior management
    • CTo prepare the organization for an external audit, particularly by a regulatory entity
    • DTo discover unmitigated security vulnerabilities, and propose paths for mitigating them

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 371. 483 questions available.