CISSP practice questions 381–390

1. Question 381 · 483 in bank

   Which of the following virtual network configuration options is BEST to protect virtual machines (VM)?

   • AData segmentation
   • BData encryption
   • CTraffic filtering
   • DTraffic throttling

   Show answer

   Answer: C

   Next question

2. Question 382 · 483 in bank

   Which of the following features is MOST effective in mitigating against theft of data on a corporate mobile device which has been stolen?

   • AMobile Device Management (MDM) with device wipe
   • BMobile device tracking with geolocation
   • CVirtual private network (VPN) with traffic encryption
   • DWhole device encryption with key escrow

   Show answer

   Answer: A

   Next question

3. Question 383 · 483 in bank

   An organization is implementing data encryption using symmetric ciphers and the Chief Information Officer (CIO) is concerned about the risk of using one key to protect all sensitive data. The security practitioner has been tasked with recommending a solution to address the CIO's concerns. Which of the following is the BEST approach to achieving the objective by encrypting all sensitive data?

   • AUse a Secure Hash Algorithm 256 (SHA-256).
   • BUse Rivest-Shamir-Adleman (RSA) keys.
   • CUse a hierarchy of encryption keys.
   • DUse Hash Message Authentication Code (HMAC) keys.

   Show answer

   Answer: C

   Next question

4. Question 384 · 483 in bank

   Which of the following is a MUST for creating a new custom-built, cloud-native application designed to be horizontally scalable?

   • ANetwork as a Service (NaaS)
   • BPlatform as a Service (PaaS)
   • CInfrastructure as a Service (IaaS)
   • DSoftware as a Service (SaaS)

   Show answer

   Answer: C

   Next question

5. Question 385 · 483 in bank

   Which of the following access control mechanisms characterized subjects and objects using a set of encoded security-relevant properties?

   • AMandatory access control (MAC)
   • BRole-based access control (RBAC)
   • CAttribute-based access control (ABAC)
   • DDiscretionary access control (DAC)

   Show answer

   Answer: C

   Next question

6. Question 386 · 483 in bank

   Which kind of dependencies should be avoided when implementing secure design principles in software-defined networking (SDN)?

   • AHybrid
   • BCircular
   • CDynamic
   • DStatic

   Show answer

   Answer: B

   Next question

7. Question 387 · 483 in bank

   Which mechanism provides the BEST protection against buffer overflow attacks in memory?

   • AAddress Space Layout Randomization (ASLR)
   • BMemory management unit
   • CStack and heap allocation
   • DDynamic random access memory (DRAM)

   Show answer

   Answer: A

   Next question

8. Question 388 · 483 in bank

   Which of the following terms is used for online service providers operating within a federation?

   • AActive Directory Federation Services (ADFS)
   • BRelying party (RP)
   • CSingle sign-on (SSO)
   • DIdentity and access management (IAM)

   Show answer

   Answer: B

   Next question

9. Question 389 · 483 in bank

   The Chief Information Security Officer (CISO) of a large financial institution is responsible for implementing the security controls to protect the confidentiality and integrity of the organization’s Information Systems. Which of the controls below is prioritized FIRST?

   • AFirewall and reverse proxy
   • BWeb application firewall (WAF) and HyperText Transfer Protocol Secure (HTTPS)
   • CEncryption of data in transit and data at rest
   • DFirewall and intrusion prevention system (IPS)

   Show answer

   Answer: C

   Next question

10. Question 390 · 483 in bank

    Who is the BEST person to review developed application code to ensure it has been tested and verified?

    • AA developer who knows what is expected of the application, but not the same one who developed it.
    • BA member of quality assurance (QA) should review the developer’s code.
    • CA developer who understands the application requirements document, and who also developed the code.
    • DThe manager should review the developer’s application code.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 381. 483 questions available.