CISSP practice questions 441–450

1. Question 441 · 483 in bank

   A senior security engineer has been tasked with ensuring the confidentiality and integrity of the organization’s most valuable personally identifiable information (PII). This data is stored on local file and database servers within the organization’s data center. The following security measures have been implemented to ensure that unauthorized access is detected and logged. • Network segmentation and enhanced access logging of the database and file servers • Implemented encryption of data at rest • Implemented full packet capture of the network traffic in and out of the sensitive network segment • Ensured all transaction log data and packet captures are backed up to corporate backup appliance within the corporate backup network segment Which of the following is the MOST likely way to exfiltrate PII while avoiding detection?

   • AUnauthorized access to the file server via Secure Shell (SSH)
   • BUnauthorized access to the database server via a compromised web application
   • CUnauthorized access to the database server via a compromised user account
   • DUnauthorized access to the backup server via a compromised service account

   Show answer

   Answer: B

   Next question

2. Question 442 · 483 in bank

   During the change management process, which of the following is used to identify and record new risks?

   • ARisk assessment
   • BLessons learned register
   • CRisk register
   • DRisk report

   Show answer

   Answer: C

   Next question

3. Question 443 · 483 in bank

   The defense strategy “never trust any input” is MOST effective against which of the following web-based system vulnerabilities?

   • AInjection vulnerabilities
   • BSensitive data exposure
   • CMan-in-the-browser attack
   • DBroken authentication

   Show answer

   Answer: A

   Next question

4. Question 444 · 483 in bank

   What is the MOST effective way to mitigate distributed denial of service (DDoS) attacks?

   • ADeploy a web application firewall (WAF).
   • BBlock access to Transmission Control Protocol (TCP) ports under attack.
   • CDetect and block bad Internet Protocol (IP) subnets on the corporate firewall.
   • DEngage an upstream Internet service provider (ISP).

   Show answer

   Answer: D

   Next question

5. Question 445 · 483 in bank

   Which function does 802.1X provide?

   • ANetwork intrusion detection system (NIDS)
   • BWireless access point (WAP)
   • CWi-Fi Protected Access (WPA)
   • DNetwork Access Control (NAC)

   Show answer

   Answer: D

   Next question

6. Question 446 · 483 in bank

   Which of the following is the PRIMARY benefit of implementing an Information Security Management System (ISMS)?

   • ACorrelates system events to monitor and demonstrate system health
   • BImproves customer confidence by demonstrating adherence to best practices
   • CIncreases employee education and awareness of security policies
   • DEnsures user compliance with computing standards

   Show answer

   Answer: B

   Next question

7. Question 447 · 483 in bank

   Concerning appropriate data retention policies, which of the following is the MAIN risk factor for the availability of archived information?

   • AData stored in third-party environments.
   • BData maintained offline requires a higher time to access.
   • CData recorded in obsolete media cannot be read.
   • DRetention of data involves a cost.

   Show answer

   Answer: C

   Next question

8. Question 448 · 483 in bank

   Wi-Fi Protected Access 2 (WPA2) is a security protocol designed with which of the following security feature?

   • AEncryption control
   • BMalware attack protection
   • CData availability
   • DReplay attack protection

   Show answer

   Answer: A

   Next question

9. Question 449 · 483 in bank

   What security technique in the Software Development Life Cycle (SDLC) should be leveraged to BEST ensure secure development throughout a project?

   • ADynamic application security testing (DAST)
   • BWaterfall
   • CSimple Object Access Protocol
   • DStatic application security testing (SAST)

   Show answer

   Answer: D

   Next question

10. Question 450 · 483 in bank

    In designing the architecture of an access control system, it was determined that confidentiality and controlled access to information were the primary focus. Which of the following security models is the BEST choice for the organization?

    • ABiba integrity model
    • BClark-Wilson model
    • CBell-LaPadula model
    • DBrewer-Nash model

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISSP practice, question 441. 483 questions available.