File Info
| Exam | Certified Information Systems Security Professional |
| Number | CISSP |
| File Name | ISC.CISSP.BrainDumps.2018-10-16.55q.vcex |
| Size | 29 KB |
| Posted | Oct 16, 2018 |
| Download | ISC.CISSP.BrainDumps.2018-10-16.55q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?
- Development, testing, and deployment
- Prevention, detection, and remediation
- People, technology, and operations
- Certification, accreditation, and monitoring
Correct answer: C
Explanation:
Reference: https://www.giac.org/paper/gsec/3873/information-warfare-cyber-warfare-future-warfare/106165 (14) Reference: https://www.giac.org/paper/gsec/3873/information-warfare-cyber-warfare-future-warfare/106165 (14)
Question 2
Intellectual property rights are PRIMARY concerned with which of the following?
- Owner’s ability to realize financial gain
- Owner’s ability to maintain copyright
- Right of the owner to enjoy their creation
- Right of the owner to control delivery method
Correct answer: D
Question 3
Which of the following is MOST important when assigning ownership of an asset to a department?
- The department should report to the business owner
- Ownership of the asset should be periodically reviewed
- Individual accountability should be ensured
- All members should be trained on their responsibilities
Correct answer: B
Question 4
Which one of the following affects the classification of data?
- Assigned security label
- Multilevel Security (MLS) architecture
- Minimum query size
- Passage of time
Correct answer: D
Question 5
An organization has doubled in size due to a rapid market share increase. The size of the Information Technology (IT) staff has maintained pace with this growth.
The organization hires several contractors whose onsite time is limited. The IT department has pushed its limits building servers and rolling out workstations and has a backlog of account management requests.
Which contract is BEST in offloading the task from the IT staff?
- Platform as a Service (PaaS)
- Identity as a Service (IDaaS)
- Desktop as a Service (DaaS)
- Software as a Service (SaaS)
Correct answer: B
Question 6
When implementing a data classification program, why is it important to avoid too much granularity?
- The process will require too many resources
- It will be difficult to apply to both hardware and software
- It will be difficult to assign ownership to the data
- The process will be perceived as having value
Correct answer: A
Explanation:
Reference: http://www.ittoday.info/AIMS/DSM/82-02-55.pdf Reference: http://www.ittoday.info/AIMS/DSM/82-02-55.pdf
Question 7
In a data classification scheme, the data is owned by the
- system security managers
- business managers
- Information Technology (IT) managers
- end users
Correct answer: B
Question 8
What is the purpose of an Internet Protocol (IP) spoofing attack?
- To send excessive amounts of data to a process, making it unpredictable
- To intercept network traffic without authorization
- To disguise the destination address from a target’s IP filtering devices
- To convince a system that it is communicating with a known entity
Correct answer: D
Question 9
At what level of the Open System Interconnection (OSI) model is data at rest on a Storage Area Network (SAN) located?
- Link layer
- Physical layer
- Session layer
- Application layer
Correct answer: D
Question 10
Which of the following is used by the Point-to-Point Protocol (PPP) to determine packet formats?
- Layer 2 Tunneling Protocol (L2TP)
- Link Control Protocol (LCP)
- Challenge Handshake Authentication Protocol (CHAP)
- Packet Transfer Protocol (PTP)
Correct answer: B
