What Highest Quality CISSP Testing Material Is

NEW QUESTION 1

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

• A. Attribute assertions as agencies can request a larger set of attributes to fulfill service delivery
• B. Data decrease related to storing personal information
• C. Reduction in operational costs to the agency
• D. Enable business objectives so departments can focus on mission rather than the business of identitymanagement

Answer: C

NEW QUESTION 2

Which of the following is most helpful in applying the principle of LEAST privilege?

• A. Establishing a sandboxing environment
• B. Setting up a Virtual Private Network (VPN) tunnel
• C. Monitoring and reviewing privileged sessions
• D. Introducing a job rotation program

Answer: A

NEW QUESTION 3

What is the FIRST step in developing a patch management plan?

• A. Subscribe to a vulnerability subscription service.
• B. Develop a patch testing procedure.
• C. Inventory the hardware and software used.
• D. Identify unnecessary services installed on systems.

Answer: B

NEW QUESTION 4

An international organization has decided to use a Software as a Service (SaaS) solution to support its business operations. Which of the following compliance standards should the organization use to assess the international code security and data privacy of the solution?

• A. Health Insurance Portability and Accountability Act (HIPAA)
• B. Service Organization Control (SOC) 2
• C. Payment Card Industry (PCI)
• D. Information Assurance Technical Framework (IATF)

Answer: B

NEW QUESTION 5

Which of the following VPN configurations should be used to separate Internet and corporate traffic?

• A. Split-tunnel
• B. Remote desktop gateway
• C. Site-to-site
• D. Out-of-band management

Answer: A

NEW QUESTION 6

An organization implements Network Access Control (NAC) ay Institute of Electrical and Electronics Engineers (IEEE) 802.1x and discovers the printers do not support the IEEE 802.1x standard. Which of the following is the BEST resolution?

• A. Implement port security on the switch ports for the printers.
• B. Implement a virtual local area network (VLAN) for the printers.
• C. Do nothing; IEEE 802.1x is irrelevant to printers.
• D. Install an IEEE 802. 1x bridge for the printers.

Answer: A

NEW QUESTION 7

The organization would like to deploy an authorization mechanism for an Information Technology (IT)
infrastructure project with high employee turnover. Which access control mechanism would be preferred?

• A. Attribute Based Access Control (ABAC)
• B. Discretionary Access Control (DAC)
• C. Mandatory Access Control (MAC)
• D. Role-Based Access Control (RBAC)

Answer: D

NEW QUESTION 8

Which of the following is a weakness of Wired Equivalent Privacy (WEP)?

• A. Length of Initialization Vector (IV)
• B. Protection against message replay
• C. Detection of message tampering
• D. Built-in provision to rotate keys

Answer: A

NEW QUESTION 9

Which of the following documents specifies services from the client's viewpoint?

• A. Service level report
• B. Business impact analysis (BIA)
• C. Service level agreement (SLA)
• D. Service Level Requirement (SLR)

Answer: C

NEW QUESTION 10

Which of the following is the PRIMARY benefit of a formalized information classification program?

• A. It drives audit processes.
• B. It supports risk assessment.
• C. It reduces asset vulnerabilities.
• D. It minimizes system logging requirements.

Answer: B

NEW QUESTION 11

Data remanence refers to which of the following?

• A. The remaining photons left in a fiber optic cable after a secure transmission.
• B. The retention period required by law or regulation.
• C. The magnetic flux created when removing the network connection from a server or personal computer.
• D. The residual information left on magnetic storage media after a deletion or erasure.

Answer: D

NEW QUESTION 12

Which of the following is a security weakness in the evaluation of common criteria (CC) products?

• A. The manufacturer can state what configuration of the product is to be evaluated.
• B. The product can be evaluated by labs m other countries.
• C. The Target of Evaluation's (TOE) testing environment is identical to the operating environment
• D. The evaluations are expensive and time-consuming to perform.

Answer: A

NEW QUESTION 13

When constructing an Information Protection Policy (IPP), it is important that the stated rules are necessary, adequate, and

• A. flexible.
• B. confidential.
• C. focused.
• D. achievable.

Answer: D

NEW QUESTION 14

An Internet software application requires authentication before a user is permitted to utilize the resource. Which testing scenario BEST validates the functionality of the application?

• A. Reasonable data testing
• B. Input validation testing
• C. Web session testing
• D. Allowed data bounds and limits testing

Answer: B

NEW QUESTION 15

An organization adopts a new firewall hardening standard. How can the security professional verify that the technical staff correct implemented the new standard?

• A. Perform a compliance review
• B. Perform a penetration test
• C. Train the technical staff
• D. Survey the technical staff

Answer: A

Explanation:
Section: Security Operations

NEW QUESTION 16
......