Question 41 · 483 in bank
Which service management process BEST helps information technology (IT) organizations with reducing cost, mitigating risk, and improving customer service?
Show answer
Answer: D
ISC2 Certified Information Systems Security Professional483 questions across 49 pages are complete and free, with no account or card.
483 questions in this bank
Free access · progress saved on this device
Which service management process BEST helps information technology (IT) organizations with reducing cost, mitigating risk, and improving customer service?
Answer: D
Which of the following is a common term for log reviews, synthetic transactions, and code reviews?
Answer: C
Conduct Security Control Testing Organizations must manage the security control testing that occurs to ensure that all security controls are tested thoroughly by authorized individuals. The facets of security control testing that organizations must include are vulnerability assessments, penetration testing, log reviews, synthetic transactions, code review and testing, misuse case testing, test coverage analysis, and interface testing. https://www.pearsonitcertification.com/articles/article.aspx?p=2931575&seqNum=2
Source: Adapted from community discussion — dev46
A company is attempting to enhance the security of its user authentication processes. After evaluating several options, the company has decided to utilize Identity as a Service (IDaaS). Which of the following factors leads the company to choose an IDaaS as their solution?
Answer: A
A database server for a financial application is scheduled for production deployment. Which of the following controls will BEST prevent tampering?
Answer: B
An organization recently suffered from a web-application attack that resulted in stolen user session cookie information. The attacker was able to obtain the information when a user's browser executed a script upon visiting a compromised website. What type of attack MOST likely occurred?
Answer: C
The Industrial Control System (ICS) Computer Emergency Response Team (CERT) has released an alert regarding ICS-focused malware specifically propagating through Windows-based business networks. Technicians at a local water utility note that their dams, canals, and locks controlled by an internal Supervisory Control and Data Acquisition (SCADA) system have been malfunctioning. A digital forensics professional is consulted in the Incident Response (IR) and recovery. Which of the following is the MOST challenging aspect of this investigation?
Answer: D
Option D http://www.people.vcu.edu/~iahmed3/publications/ieee_computer_2012.pdf Because volatile data changes continuously on a running system, capturing live data presents two key challenges for forensic investigators. 1. Early data acquisition after an incident 2. Digital evidence validity.
Source: Adapted from community discussion — explorer3
An attack utilizing social engineering and a malicious Uniform Resource Locator (URL) link to take advantage of a victim's existing browser session with a web application is an example of which of the following types of attack?
Answer: B
What term is commonly used to describe hardware and software assets that are stored in a configuration management database (CMDB)?
Answer: A
The term commonly used to describe hardware and software assets that are stored in a configuration management database (CMDB) is "Configuration item" (option A). A configuration item refers to any component or element of an IT system that needs to be managed and controlled. It can include physical devices, software applications, databases, network components, and other related items. The CMDB is a central repository that stores information about these configuration items, including their attributes, relationships, and configurations.
Source: Adapted from community discussion — Bach1968
Which of the following encryption technologies has the ability to function as a stream cipher?
Answer: C
A company is planning to implement a private cloud infrastructure. Which of the following recommendations will support the move to a cloud infrastructure?
Answer: A
Cloud Network Virtualization: Benefits of SDN over VLAN - Prefer SDN when available. -Use SDN capabilities for multiple virtual networks and multiple cloud accounts/segments to increase network isolation. - Separate accounts and virtual networks dramatically limit blast radius compared to traditional data centers. - Implement default deny with cloud firewalls. - Apply cloud firewalls on a per-workload basis as opposed to a per-network basis. - Always restrict traffic between workloads in the same virtual subnet using a cloud firewall (security group) policy whenever possible. - Minimize dependency on virtual appliances that restrict elasticity or cause performance bottlenecks. https://cloudsecurityalliance.org/blog/2021/06/25/cloud-network-virtualization-benefits-of-sdn-over-vlan/
Source: Adapted from community discussion — rdy4u
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISSP practice, question 41. 483 questions available.
Version 1.0.0. How we source questions