ISC CISSP Exam Questions & Answers

When a system changes significantly, who is PRIMARILY responsible for assessing the security impact?

A. Chief Information Security Officer (CISO)

B. Information System Owner

C. Information System Security Officer (ISSO)

D. Authorizing Official

In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

A. Reduced risk to internal systems.

B. Prepare the server for potential attacks.

C. Mitigate the risk associated with the exposed server.

D. Bypass the need for a firewall.

Refer to the information below to answer the question.

A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a child that uses the computer to send and receive e-mail, search the web, and use instant messaging. The organization's Information Technology (IT) department discovers that a peer-to-peer program has been installed on the computer using the employee's access.

Which of the following could have MOST likely prevented the Peer-to-Peer (P2P) program from being installed on the computer?

A. Removing employee's full access to the computer

B. Supervising their child's use of the computer

C. Limiting computer's access to only the employee

D. Ensuring employee understands their business conduct guidelines