CISSP Online Practice Questions and Answers

Which of the following threats exists with an implementation of digital signatures?

A. Spoofing

B. Substitution

C. Content tampering

D. Eavesdropping

Which layer of the Open systems Interconnection (OSI) model is being targeted in the event of a Synchronization (SYN) flood attack?

A. Session

B. Transport

C. Network

D. Presentation

What is the GREATEST challenge of an agent-based patch management solution?

A. Time to gather vulnerability information about the computers in the program

B. Requires that software be installed, running, and managed on all participating computers

C. The significant amount of network bandwidth while scanning computers

D. The consistency of distributing patches to each participating computer

Which of the following MUST system and database administrators be aware of and apply when configuring systems used for storing personal employee data?

A. Secondary use of the data by business users

B. The organization's security policies and standards

C. The business purpose for which the data is to be used

D. The overall protection of corporate resources and data

Refer to the information below to answer the question.

An organization has hired an information security officer to lead their security department. The officer has adequate people resources but is lacking the other necessary components to have an effective security program. There are numerous initiatives requiring security involvement.

Given the number of priorities, which of the following will MOST likely influence the selection of top initiatives?

A. Severity of risk

B. Complexity of strategy

C. Frequency of incidents

D. Ongoing awareness

When building a data center, site location and construction factors that increase the level of vulnerability to physical threats include

A. hardened building construction with consideration of seismic factors.

B. adequate distance from and lack of access to adjacent buildings.

C. curved roads approaching the data center.

D. proximity to high crime areas of the city.

Intellectual property rights are PRIMARY concerned with which of the following?

A. Owner's ability to realize financial gain

B. Owner's ability to maintain copyright

C. Right of the owner to enjoy their creation

D. Right of the owner to control delivery method

Which of the following steps should be conducted during the FIRST phase of software assurance in a generic acquisition process?

A. Establishing and consenting to the contract work schedule

B. Issuing a Request for Proposal (RFP) with a work statement

C. Developing software requirements to be included in work statement

D. Reviewing and accepting software deliverables

Recently, an unknown event has disrupted a single Layer-2 network that spans between two geographically diverse data centers. The network engineers have asked for assistance in identifying the root cause of the event. Which of the following is the MOST likely cause?

A. Misconfigured routing protocol

B. Smurf attack

C. Broadcast domain too large

D. Address spoofing

When implementing single sign-on (SSO) on a network, which authentication approach BEST allows users to use credentials across multiple applications?

A. Public key infrastructure (PKI)

B. Security Assertion Markup Language (SAML)

C. Delegated Identity Management

D. Federated Identity Management