CISSP practice questions 401–410

1. Question 401 · 483 in bank

   In order to meet the project delivery deadline, a web application developer used readily available software components. Which is the BEST method for reducing the risk associated with this practice?

   • AEnsure developers are using approved software development frameworks.
   • BObtain components from official sources over secured link.
   • CEnsure encryption of all sensitive data in a manner that protects and defends against threats.
   • DImplement a process to verify the effectiveness of the software components and settings.

   Show answer

   Answer: D

   Next question

2. Question 402 · 483 in bank

   To ensure proper governance of information throughout the lifecycle, which of the following should be assigned FIRST?

   • AOwner
   • BClassification
   • CCustodian
   • DRetention

   Show answer

   Answer: A

   Next question

3. Question 403 · 483 in bank

   An effective information security strategy is PRIMARILY based upon which of the following?

   • ARisk management practices
   • BSecurity budget constraints
   • CSecurity control implementation
   • DIndustry and regulatory standards

   Show answer

   Answer: A

   Next question

4. Question 404 · 483 in bank

   One of Canada’s leading pharmaceutical firms recently hired a Chief Data Officer (CDO) to oversee its data privacy program. The CDO has discovered the firm’s marketing department has been collecting information from individuals without their knowledge and consent via the company website. Which of the following privacy regulations should concern the CDO regarding this practice?

   • AThe Health Insurance Portability and Accountability Act (HIPAA)
   • BThe Privacy Act of 1974
   • CThe Fair Information Practice Principles (FIPPs)
   • DThe Personal Information Protection and Electronic Documents Act (PIPEDA)

   Show answer

   Answer: D

   Next question

5. Question 405 · 483 in bank

   An organization is attempting to strengthen the configuration of its enterprise resource planning (ERP) software in order to enforce sufficient segregation of duties (SoD). Which of the following approaches would BEST improve SoD effectiveness?

   • AImplementation of frequent audits of access and activity in the ERP by a separate team with no operational duties
   • BImplementation of strengthened authentication measures including mandatory second-factor authentication
   • CReview of ERP access profiles to enforce the least-privilege principle based on existing employee responsibilities
   • DReview of employee responsibilities and ERP access profiles to differentiate mission activities from system support activities

   Show answer

   Answer: D

   Next question

6. Question 406 · 483 in bank

   Which type of log collection is focused on detecting and responding to attacks, malware infection, and data theft?

   • AIntrusion detection
   • BOperational
   • CSecurity
   • DCompliance

   Show answer

   Answer: C

   Next question

7. Question 407 · 483 in bank

   If a medical analyst independently provides protected health information (PHI) to an external marketing organization, which ethical principal is this a violation of?

   • AHigher ethic in the worst case
   • BInformed consent
   • CChange of scale test
   • DPrivacy regulations

   Show answer

   Answer: B

   Next question

8. Question 408 · 483 in bank

   Which of the following measures is the MOST critical in order to safeguard from a malware attack on a smartphone?

   • AEnable strong password.
   • BInstall anti-virus for mobile.
   • CEnable biometric authentication.
   • DPrevent jailbreaking or rooting.

   Show answer

   Answer: D

   Next question

9. Question 409 · 483 in bank

   Which of the following Secure Shell (SSH) remote access practices is MOST suited for scripted functions?

   • ARestricting authentication by Internet Protocol (IP) address
   • BRequiring multi-factor authentication (MFA)
   • CImplementing access credentials management tools
   • DUsing public key-based authentication method

   Show answer

   Answer: D

   Next question

10. Question 410 · 483 in bank

    Which stage in the identity management (IdM) lifecycle constitutes the GREATEST risk for an enterprise if performed incorrectly?

    • APropagating
    • BDeprovisioning
    • CProvisioning
    • DMaintaining

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 401. 483 questions available.