CISSP practice questions 31–40

1. Question 31 · 483 in bank

   What industry-recognized document could be used as a baseline reference that is related to data security and business operations or conducting a security assessment?

   • AService Organization Control (SOC) 1 Type 2
   • BService Organization Control (SOC) 1 Type 1
   • CService Organization Control (SOC) 2 Type 2
   • DService Organization Control (SOC) 2 Type 1

   Show answer

   Answer: C

   Next question

2. Question 32 · 483 in bank

   What is the FIRST step when developing an Information Security Continuous Monitoring (ISCM) program?

   • ACollect the security-related information required for metrics, assessments, and reporting.
   • BEstablish an ISCM program determining metrics, status monitoring frequencies, and control assessment frequencies.
   • CDefine an ISCM strategy based on risk tolerance.
   • DEstablish an ISCM technical architecture.

   Show answer

   Answer: C

   Explanation

   Information Security Continuous Monitoring Reference Continuous monitoring can be a ubiquitous term as it means different things to different professions. NIST SP 800-137 sets forth a standard to follow when applying the principle in the risk management framework utilizing the NIST control set. The primary process for implementing ISCM is to: 1 - Define the ISCM strategy 2 - Establish an ISCM program 3 - Implement an ISCM program 4 - Analyze data and report findings 5 - Respond to findings 6 - Review and update the monitoring program and strategy Factored into this is the use of manual and automated checks to provide continuous updates and feedback to the system as a whole.

   Source: Adapted from community discussion — rajkamal0

   References

   • nist.gov documentation

   Next question

3. Question 33 · 483 in bank

   A criminal organization is planning an attack on a government network. Which of the following scenarios presents the HIGHEST risk to the organization?

   • AOrganization loses control of their network devices.
   • BNetwork is flooded with communication traffic by the attacker.
   • CNetwork management communications is disrupted.
   • DAttacker accesses sensitive information regarding the network topology.

   Show answer

   Answer: A

   Next question

4. Question 34 · 483 in bank

   Which of the following would an information security professional use to recognize changes to content, particularly unauthorized changes?

   • AFile Integrity Checker
   • BSecurity information and event management (SIEM) system
   • CAudit Logs
   • DIntrusion detection system (IDS)

   Show answer

   Answer: A

   Explanation

   File integrity monitoring (FIM) refers to an IT security process and technology that tests and checks operating system (OS), database, and application software files to determine whether or not they have been tampered with or corrupted. FIM, which is a type of change auditing, verifies and validates these files by comparing the latest versions of them to a known, trusted “baseline.” If FIM detects that files have been altered, updated, or compromised, FIM can generate alerts to ensure further investigation, and if necessary, remediation, takes place.

   Source: Adapted from community discussion — franbarpro

   Next question

5. Question 35 · 483 in bank

   Which reporting type requires a service organization to describe its system and define its control objectives and controls that are relevant to users' internal control over financial reporting?

   • AStatement on Auditing Standards (SAS) 70
   • BService Organization Control 1 (SOC1)
   • CService Organization Control 2 (SOC2)
   • DService Organization Control 3 (SOC3)

   Show answer

   Answer: B

   Next question

6. Question 36 · 483 in bank

   An organization has requested storage area network (SAN) disks for a new project. What Redundant Array of Independent Disks (RAID) level provides the BEST redundancy and fault tolerance?

   • ARAID level 1
   • BRAID level 3
   • CRAID level 4
   • DRAID level 5

   Show answer

   Answer: D

   Explanation

   I think the keyword is BEST. Yes RAID 1 provides fault tolerance and redundancy, but is it BEST? With RAID 1, fault tolerance is good since more than one disk contains the same data. However, in the case of a write operation, both the disks can get corrupted which will eventually result in a data loss. RAID 5 offers fault tolerance like RAID 1, but instead of using mirroring, it uses parity and checksum where the data is striped and stored evenly across all disks, along with their parity, so the data can be reconstructed at any time.

   Source: Adapted from community discussion — Jamati

   Next question

7. Question 37 · 483 in bank

   Which of the following is the BEST method to validate secure coding techniques against injection and overflow attacks?

   • AScheduled team review of coding style and techniques for vulnerability patterns
   • BThe regular use of production code routines from similar applications already in use
   • CUsing automated programs to test for the latest known vulnerability patterns
   • DEnsure code editing tools are updated against known vulnerability patterns

   Show answer

   Answer: C

   Next question

8. Question 38 · 483 in bank

   Compared to a traditional network, which of the following is a security-related benefit that software-defined networking (SDN) provides?

   • ACentralized network provisioning
   • BReduced network latency when scaled
   • CCentralized network administrative control
   • DReduced hardware footprint and cost

   Show answer

   Answer: C

   Explanation

   The keyword is "security benefit" A. Centralized network provisioning - its SDN feature/ capability B. Reduced network latency when scaled - latency relates to performance C. Centralized network administrative control - interestingly, this option is a strength and weakness for SDN. Although you can provide defence of depth controls on the SDN controller but compromising the admin account can initiate various types of attacks on SDN. but this option seems right compared to others D. Reduced hardware footprint and cost - this relates to business cost and deployment

   Source: Adapted from community discussion — dev46

   Next question

9. Question 39 · 483 in bank

   When resolving ethical conflicts, the information security professional MUST consider many factors. In what order should the considerations be prioritized?

   • APublic safety, duties to individuals, duties to the profession, and duties to principals
   • BPublic safety, duties to principals, duties to the profession, and duties to individuals
   • CPublic safety, duties to principals, duties to individuals, and duties to the profession
   • DPublic safety, duties to the profession, duties to principals, and duties to individuals

   Show answer

   Answer: C

   Next question

10. Question 40 · 483 in bank

    What is the MOST effective response to a hacker who has already gained access to a network and will attempt to pivot to other resources?

    • AWarn users of a breach.
    • BReset all passwords.
    • CSegment the network.
    • DShut down the network.

    Show answer

    Answer: C

    Explanation

    I really got laughed when I saw the answer is "segment the network". Which this solution requires careful design, consideration, and implementation. Which takes time. I don't know how security team can respond to the network by segment it at that time. What kind of network is this?

    Source: Adapted from community discussion — oudmaster

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 31. 483 questions available.