File Info
| Exam | Certified Information Systems Security Professional |
| Number | CISSP |
| File Name | ISC.CISSP.CertDumps.2019-08-22.97q.vcex |
| Size | 112 KB |
| Posted | Aug 22, 2019 |
| Downloads: | 1 |
| Download | ISC.CISSP.CertDumps.2019-08-22.97q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the following is the BEST action to take?
- Revoke access temporarily.
- Block user access and delete user account after six months.
- Block access to the offices immediately.
- Monitor account usage temporarily.
Correct answer: D
Question 2
The goal of a Business Impact Analysis (BIA) is to determine which of the following?
- Cost effectiveness of business recovery
- Cost effectiveness of installing software security patches
- Resource priorities for recovery and Maximum Tolerable Downtime (MTD)
- Which security measures should be implemented
Correct answer: C
Question 3
An organization publishes and periodically updates its employee policies in a file on their intranet.
Which of the following is a PRIMARY security concern?
- Ownership
- Confidentiality
- Availability
- Integrity
Correct answer: C
Question 4
What does the Maximum Tolerable Downtime (MTD) determine?
- The estimated period of time a business critical database can remain down before customers are affected.
- The fixed length of time a company can endure a disaster without any Disaster Recovery (DR) planning
- The estimated period of time a business can remain interrupted beyond which it risks never recovering
- The fixed length of time in a DR process before redundant systems are engaged
Correct answer: C
Question 5
Which of the following approaches is the MOST effective way to dispose of data on multiple hard drives?
- Delete every file on each drive.
- Destroy the partition table for each drive using the command line.
- Degauss each drive individually.
- Perform multiple passes on each drive using approved formatting methods.
Correct answer: D
Question 6
Which of the following BEST describes Recovery Time Objective (RTO)?
- Time of application resumption after disaster
- Time of application verification after disaster.
- Time of data validation after disaster.
- Time of data restoration from backup after disaster.
Correct answer: A
Question 7
Which of the following is the PRIMARY benefit of a formalized information classification program?
- It minimized system logging requirements.
- It supports risk assessment.
- It reduces asset vulnerabilities.
- It drives audit processes.
Correct answer: B
Question 8
Which of the following is the BEST method to reduce the effectiveness of phishing attacks?
- User awareness
- Two-factor authentication
- Anti-phishing software
- Periodic vulnerability scan
Correct answer: A
Question 9
The PRIMARY purpose of accreditation is to:
- comply with applicable laws and regulations.
- allow senior management to make an informed decision regarding whether to accept the risk of operating the system.
- protect an organization's sensitive data.
- verify that all security controls have been implemented properly and are operating in the correct manner.
Correct answer: B
Question 10
Which of the following is BEST suited for exchanging authentication and authorization messages in a multi-party decentralized environment?
- Lightweight Directory Access Protocol (LDAP)
- Security Assertion Markup Language (SAML)
- Internet Mail Access Protocol
- Transport Layer Security (TLS)
Correct answer: B
