Most UptoDate ISC CISSP Exam Dumps PDF 2024
100% Free ISC Certification CISSP Dumps PDF Demo Cert Guide Cover
ISC CISSP (Certified Information Systems Security Professional) Certification Exam is a globally recognized and highly respected certification for information security professionals. CISSP exam is designed to test the knowledge and skills of candidates in ten different domains related to information security. These domains include security and risk management, asset security, security engineering, communication and network security, identity and access management, security assessment and testing, security operations, software development security, and cybersecurity.
NEW QUESTION # 864
The typical computer felons are usually persons with which of the following characteristics?
- A. They conspire with others
- B. They hold a position of trust
- C. They deviate from the accepted norms of security
- D. They have had previous contact with law enforcement
Answer: C
NEW QUESTION # 865
Rank the Hypertext Transfer protocol (HTTP) authentication types shows below in order of relative strength.
Drag the authentication type on the correct positions on the right according to strength from weakest to strongest.
Answer:
Explanation:
NEW QUESTION # 866
Who is essential for developing effective test scenarios for disaster recovery (DR) test plans?
- A. IT staff members and project managers
- B. Business line management and IT staff members
- C. Chief Information Officer (CIO) and DR manager
- D. DR manager end IT staff members
Answer: C
NEW QUESTION # 867
Which of the following roles has the obligation to ensure that a third party provider is capable of processing and handling data in a secure manner and meeting the standards set by the organization?
- A. Data Owner
- B. Data Creator
- C. Data Custodian
- D. Data User
Answer: A
NEW QUESTION # 868
Which of the following items BEST describes the standards addressed
by Title II, Administrative Simplification, of the Health Insurance
Portability and Accountability Act (US Kennedy-Kassebaum Health
Insurance and Portability Accountability Act -HIPAA-Public Law 104-19)?
- A. Unique Health Identifiers; Security and Electronic Signatures and
Privacy - B. Transaction Standards, to include Code Sets; Security and Electronic
Signatures and Privacy - C. Security and Electronic Signatures and Privacy
- D. Transaction Standards, to include Code Sets; Unique Health
Identifiers; Security and Electronic Signatures and Privacy
Answer: D
Explanation:
HIPAA was designed to provide for greater access to personal
health care information, enable portability of health care insurance,
establish strong penalties for health care fraud, and streamline the
health care claims process through administrative simplification. To
accomplish the latter, Title II of the HIPAA law, Administrative Simplification, requires standardizing the formats for the electronic transmission of health care information. The transactions and code sets portion includes standards for submitting claims, enrollment information, premium payments, and others as adopted by HHS. The standard for transactions is the ANSI ASC X12N version 4010 EDI
Standard. Standard code sets are required for diagnoses and inpatient
services, professional services, dental services (replaces D'
codes), and drugs (instead of J' codes). Also, local codes are not to be used. Unique health identifiers are required to identify health care providers, health plans, employers, and individuals. Security and electronic signatures are specified to protect health care information. Pri- vacy protections are required to ensure that there is no unauthorized
disclosure of individually identifiable health care information.
The other answers are incorrect since they do not include all four
major standards. Additional information can be found at http://
aspe.hhs.gov/adminsimp.
NEW QUESTION # 869
What is a security concern when considering implementing software-defined networking (SDN)?
- A. It increases the attack footprint.
- B. It is cloud based.
- C. It has a decentralized architecture.
- D. It uses open source protocols.
Answer: A
Explanation:
A significant issue regarding SDN security is that virtualizing every aspect of the network infrastructure increases your attack footprint.
NEW QUESTION # 870
Which of the following is critical if an employee is dismissed due to violation of an organization's Acceptable Use Policy (ALP)?
- A. Internet access logs
- B. Appropriate documentation
- C. Proxy records
- D. Privilege suspension
Answer: A
NEW QUESTION # 871
The use of strong authentication, the encryption of Personally Identifiable Information (PII) on database servers, application security reviews, and the encryption of data transmitted across networks provide
- A. data availability.
- B. defense in depth.
- C. non-repudiation.
- D. data integrity.
Answer: B
NEW QUESTION # 872
How can an individual/person BEST be identified or authenticated to prevent local masquerading attacks?
- A. User Id and password
- B. Two-factor authentication
- C. Biometrics
- D. Smart card and PIN code
Answer: C
Explanation:
Explanation/Reference:
Explanation:
Masquerading is the term used when one user pretends to be another user. Strong authentication is the best defense against this.
Authentication is based on the following three factor types:
Type 1. Something you know, such as a PIN or password
Type 2. Something you have, such as an ATM card or smart card
Type 3. Something you are (physically), such as a fingerprint or retina scan
Biometrics verifies an individual's identity by analyzing a unique personal attribute or behavior, which is one of the most effective and accurate methods of verifying identification.
A biometric authentication such as a fingerprint cannot be imitated which makes biometrics the best defense against masquerading attacks.
Incorrect Answers:
A: A user Id and password can be guessed by an attacker. This is not the best identification and authentication method to prevent local masquerading attacks.
B: A smart card can be stolen and the PIN guessed by an attacker. This is not the best identification and authentication method to prevent local masquerading attacks.
C: Two-factor authentication is more secure than other methods but still less secure than biometrics. Two- factor authentication could comprise of "something you have" and "something you know". The "something you have" such as a smart card could be stolen by an attacker and the "something you know" such as a PIN could be guessed. This is not the best identification and authentication method to prevent local masquerading attacks.
References:
Krutz, Ronald L. and Russell Dean Vines, The CISSP and CAP Prep Guide: Mastering CISSP and CAP, Wiley Publishing, Indianapolis, 2007, p. 57
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 187
NEW QUESTION # 873
What attack floods networks with broadcast traffic so that the network is congested?
- A. SMURF
- B. Spoofing
- C. Teardrop
- D. Brute force
Answer: A
Explanation:
SMURF attack -- This attack floods networks with broadcast traffic so that the network is congested. The perpetrator sends a large number of spoofed ICMP (Internet Control Message Protocol) echo requests to broadcast addresses hoping packets will be sent to the spoofed addresses. You need to understand the OSI model and how protocols are transferred between layer 3 and layer 2 to understand this attack. The layer 2 will respond to the ICMP echo request with an ICMP echo reply each time, multiplying the traffic by the number of hosts involved. Engineers should turn off broadcast capability (if possible in your environment) to deter this kind of attack.
NEW QUESTION # 874
Which of the following BEST describes the purpose of Border Gateway Protocol (BGP)?
- A. Maintain a list of efficient network paths between autonomous systems.
- B. Maintain a list of network paths between internet routers.
- C. Provide firewall services to cloud-enabled applications.
- D. Provide Routing Information Protocol (RIP) version 2 advertisements to neighboring layer 3 devices.
Answer: D
NEW QUESTION # 875
Which of the following is an advantage of proxies?
- A. Proxies create a single point of failure.
- B. Proxies provide a single point of access, control, and logging.
- C. Proxies must exist for each service.
- D. Proxies do not protect the base operating system.
Answer: B
Explanation:
By ensuring that all content flows through a single point, proxies provide a
checkpoint for network data, which is an advantage rather than a liability, as are other choices.
Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 8:
Application-Level Proxies.
NEW QUESTION # 876
If compromised, which of the following would lead to the exploitation of multiple virtual machines?
- A. Virtual machine file system
- B. Virtual device drivers
- C. Virtual machine instance
- D. Virtual machine monitor
Answer: D
NEW QUESTION # 877
What is the PRIMARY use of a password?
- A. Allow access to files.
- B. Segregate various user's accesses.
- C. Identify the user.
- D. Authenticate the user.
Answer: D
Explanation:
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
NEW QUESTION # 878
An engineer in a software company has created a virus creation tool. The tool can generate thousands of polymorphic viruses. The engineer is planning to use the tool in a controlled environment to test the company's next generation virus scanning software. Which would
BEST describe the behavior of the engineer and why?
- A. The behavior is not ethical because creating any kind of virus is bad.
- B. The behavior is ethical because the tool will be used to create a better virus scanner.
- C. The behavior is ethical because any experienced programmer could create such a tool.
- D. The behavior is not ethical because such a tool could be leaked on the Internet.
Answer: B
NEW QUESTION # 879
......
Updated ISC CISSP Dumps – PDF & Online Engine: https://www.examboosts.com/ISC/CISSP-practice-exam-dumps.html
PDF Exam Material 2024 Realistic CISSP Dumps Questions: https://drive.google.com/open?id=1NVA5auLcOQR27zJ_SaQdNGGDAdmEwHeg