Cultivate brilliance using the essential CISSP exam dumps
Venture beyond the ordinary and tap into the extraordinary wealth of knowledge encapsulated within the CISSP dumps. Precisely engineered to reflect the multifaceted tapestry of the syllabus, the CISSP dumps lay out a galaxy of practice questions, illuminating the path to mastery. Whether you\’re drawn to the crisp articulation in PDFs or captivated by the dynamic interplay in the VCE format, the CISSP dumps stand as a testament to academic excellence. A holistic study guide, synergistically entwined with the CISSP dumps, unravels the mysteries, providing clarity and purpose. With unwavering faith in the caliber of these tools, we pledge our 100% Pass Guarantee.
Propel your CISSP exam performance with the unmatched quality of our CISSP VCE and PDF resources
Question 1:
Which of the following is a potential risk when a program runs in privileged mode?
A. It may serve to create unnecessary code complexity
B. It may not enforce job separation duties
C. It may create unnecessary application hardening
D. It may allow malicious code to be inserted
Correct Answer: D
Question 2:
Which of the following documents specifies services from the client\’s viewpoint?
A. Service level report
B. Business impact analysis (BIA)
C. Service level agreement (SLA)
D. Service Level Requirement (SLR)
Correct Answer: D
Question 3:
Which of the following technologies would provide the BEST alternative to anti-malware software?
A. Host-based Intrusion Detection Systems (HIDS)
B. Application whitelisting
C. Host-based firewalls
D. Application sandboxing
Correct Answer: B
Question 4:
In Identity Management (IdM), when is the verification stage performed?
A. As part of system sign-on
B. Before creation of the identity
C. After revocation of the identity
D. During authorization of the identity
Correct Answer: A
Question 5:
Where would an organization typically place an endpoint security solution?
A. Web server and individual devices
B. Intrusion Detection System (IDS) and web server
C. Central server and individual devices
D. Intrusion Detection System (IDS) and central sever
Correct Answer: A
Question 6:
Which kind of dependencies should be avoided when implementing secure design principles in software-defined networking (SDN)?
A. Hybrid
B. Circular
C. Dynamic
D. Static
Correct Answer: B
Reference: https://opennetworking.org/wp-content/uploads/2014/10/Principles_and_Practices_for_Securing_Software-Defined_Networks_applied_to_OFv1.3.4_V1.0.pdf
Question 7:
To monitor the security of buried data lines inside the perimeter of a facility, which of the following is the MOST effective control?
A. Fencing around the facility with closed-circuit television (CCTV) cameras at all entry points
B. Ground sensors installed and reporting to a security event management (SEM) system
C. Steel casing around the facility ingress points
D. Regular sweeps of the perimeter, including manual inspection of the cable ingress points
Correct Answer: D
Question 8:
During an audit of system management, auditors find that the system administrator has not been trained. What actions need to be taken at once to ensure the integrity of systems?
A. A review of hiring policies and methods of verification of new employees
B. A review of all departmental procedures
C. A review of all training procedures to be undertaken
D. A review of all systems by an experienced administrator
Correct Answer: D
Question 9:
The stringency of an Information Technology (IT) security assessment will be determined by the
A. system\’s past security record.
B. size of the system\’s database.
C. sensitivity of the system\’s datA.
D. age of the system.
Correct Answer: C
Question 10:
A database server for a financial application is scheduled for production deployment. Which of the following controls will BEST prevent tampering?
A. Service accounts removal
B. Data validation
C. Logging and monitoring
D. Data sanitization
Correct Answer: B
Question 11:
What type of database attack would allow a customer service employee to determine quarterly sales results before they are publically announced?
A. Polyinstantiation
B. Inference
C. Aggregation
D. Data mining
Correct Answer: A
Question 12:
Which of the following features is MOST effective in mitigating against theft of data on a corporate mobile device Which has stolen?
A. Whole device encryption with key escrow
B. Mobile Device Management (MDMJ with device wipe
C. Mobile device tracking with geolocation
D. Virtual Private Network (VPN) with traffic encryption
Correct Answer: B
Question 13:
The initial security categorization should be done early in the system life cycle and should be reviewed periodically. Why is it important for this to be done correctly?
A. It determines the security requirements.
B. It affects other steps in the certification and accreditation process.
C. It determines the functional and operational requirements.
D. The system engineering process works with selected security controls.
Correct Answer: B
Question 14:
Which step of the Risk Management Framework (RMF) identifies the initial set of baseline security controls?
A. Selection
B. Monitoring
C. Implementation
D. Assessment
Correct Answer: A
Reference: https://csrc.nist.gov/projects/risk-management/risk-management-framework-(RMF)-Overview
Question 15:
A security professional has been assigned to assess a web application. The assessment report recommends switching to Security Assertion Markup Language (SAML). What is the PRIMARY security benefit in switching to SAML?
A. It uses Transport Layer Security (TLS) to address confidentiality.
B. It enables single sign-on (SSO) for web applications.
C. The users\’ password Is not passed during authentication.
D. It limits unnecessary data entry on web forms.
Correct Answer: B