CISSP practice questions 421–430

1. Question 421 · 483 in bank

   An Information System Security Officer (ISSO) employed by a large corporation, while also freelancing in a similar role for a competitor, violates what canon of the (ISC)2 Code of Professional Ethics?

   • AAdvance and protect the profession
   • BProvide diligent and competent service to principals
   • CAct honorably, honestly, justly, responsibly, and legally
   • DProtect society, the commonwealth, and the infrastructure

   Show answer

   Answer: B

   Next question

2. Question 422 · 483 in bank

   Which is the FIRST action the Incident Response team should take when an incident is suspected?

   • AChoose a containment strategy.
   • BRecord all facts regarding the incident.
   • CAttempt to identify the attacker.
   • DNotify management of the incident.

   Show answer

   Answer: B

   Next question

3. Question 423 · 483 in bank

   A hospital has three data classification levels: shareable without restrictions, shareable with restrictions, and internal use only. Which of the following BEST demonstrates adhering to principles of good enterprise data classification?

   • AA printout of the employee code of conduct marked “shareable with restrictions” is posted in the hallway where patients have access.
   • BA printout of the employee code of conduct marked “internal use only” is posted in the waiting room.
   • CA memo regarding a newly discovered data breach marked as “internal use only” is posted on the wall in the employee lunchroom.
   • DAn electronic health record (EHR) with personally identifiable information (PII) marked as “sharable with restrictions” is found in the employee lunchroom.

   Show answer

   Answer: C

   Next question

4. Question 424 · 483 in bank

   A web application requires users to register before they can use its services. Users must choose a unique username and a password that contains a minimum of eight characters. Which method MUST be used to store these passwords to ensure offline attacks are difficult?

   • AUse an encryption algorithm that is fast with a random per-user encryption key.
   • BUse a hash function that is fast with a per-user random salt.
   • CUse a hash function with a cost factor and a per-user random salt.
   • DUse an encryption algorithm with a random master key.

   Show answer

   Answer: C

   Next question

5. Question 425 · 483 in bank

   Which of the following is the PRIMARY objective of performing scans with an active discovery tool?

   • ADiscovering virus and malware activity
   • BDiscovering changes for security configuration management (CM)
   • CAsset identification (ID) and inventory management
   • DVulnerability management and remediation

   Show answer

   Answer: C

   Next question

6. Question 426 · 483 in bank

   A large law firm would like to enable employees to participate in a bring your own device (BYOD) program. Only devices with up-to-date antivirus and operating system (OS) patches will be allowed on the network. Which solution will BEST enforce the security requirements?

   • AEndpoint Detection and Response
   • BNext-Generation Firewall
   • CIntrusion detection and prevention system (IDPS)
   • DNetwork Access Control (NAC)

   Show answer

   Answer: D

   Next question

7. Question 427 · 483 in bank

   A security operations center (SOC) discovers a recently deployed router beaconing to a malicious website. Replacing the router fixes the issue. What is the MOST likely cause of the router’s behavior?

   • AThe network administrator failed to reconfigure the router’s access control list (ACL).
   • BThe router was damaged during shipping or installed incorrectly.
   • CThe router was counterfeit and acquired through unauthorized channels.
   • DThe network administrator failed to update the router’s firmware.

   Show answer

   Answer: C

   Next question

8. Question 428 · 483 in bank

   The principle that personally identifiable information (PII) should be kept up-to-date and relevant to the purposes for which they are to be used is attributed to which fair information practice per the United States (US) Organization for Economic Cooperation and Development (OECD)?

   • APurpose Specification
   • BSecurity Safeguards
   • CCollection Limitation
   • DData Quality

   Show answer

   Answer: D

   Next question

9. Question 429 · 483 in bank

   Which of the following are common components of a Security Assertion Markup Language (SAML) based federation system?

   • AClient, Service Provider, identity provider (IdP), Token
   • BClient, Service Provider, Resource Server, Grant
   • CClient, Authorization Server, identity provider (IdP), Claim
   • DClient, Authorization Server, Resource Server, Assertion

   Show answer

   Answer: A

   Next question

10. Question 430 · 483 in bank

    Which of the following is the MOST effective way to ensure hardware and software remain updated throughout an organization?

    • APerformance of frequent security configuration audits
    • BPerformance of regular vulnerability scans
    • CUse an inventory management tool
    • DUse an automated configuration monitoring system

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 421. 483 questions available.