GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

CISSP Master

Rob pol 85 questions

Take the quiz

Questions in this quiz (85)

  1. 1If e-mail is subject to review by individuals other than the sender and recipient, what should be clearly stated in the organization’s e-mail policy
    1. ATechnologies and methods used to monitor and enforce the organization’s policies
    2. BSenior management and business-unit owner responsibilities and delegation options
    3. CClear, legally defensible definition of what constitutes a business record
    4. DConsequences for violation of the organization’s acceptable-use policy
    5. ENo expectation of privacy for e-mail communications, using the organization’s resources
  2. 2Embedding symbols in images or common items, such as pictures or quilts, is an example of
    1. AEspionage
    2. BTransposition cipher
    3. CKey exchange
    4. DArithmancy
    5. ESteganography
  3. 3Which type of Business Continuity Plan (BCP) test involves practicing aspects of the BCP, without actually interrupting operations or bringing an alternate site on-line?
    1. AStructured walkthrough
    2. BChecklist
    3. CSimulation
    4. DFull interruption
    5. EParallel
  4. 4Which of the following best describes an external intrusion attempt on a local-area network (LAN)?
    1. AInternal users try to gain unauthorized access to information assets outside the organizational perimeter.
    2. BExternal-intrusion attempts from sources outside the LAN are not granted permissions or rights to an organization’s information assets.
    3. CExternal users attempt to access public resources.
    4. DExternal intruders attempt exploitation of vulnerabilities, to remove their own access.
    5. EInternal users perform inappropriate acts on assets to which they have been given rights or permissions.
  5. 5The items listed below are examples of ___________________ controls.
    *Smart cards
    *Access control lists
    *Authentication servers
    *Auditing
    1. ARole-based
    2. BAdministrative
    3. CTechnicaL
    4. DPhysical
    5. EMandatory
  6. 6Which of the following is the BEST method for managing users in an enterprise?
    1. AEnter user data in a spreadsheet.
    2. BPlace them in a centralized Lightweight Directory Access Protocol.
    3. CImplement centralized access control.
    4. DDeploy Kerberos.
  7. 7Operating-system fingerprinting uses all of the following, EXCEPT ________, to identify a target operating system.
    1. ASequence Verifier
    2. BInitial sequence number
    3. CAddress spoofing
    4. DTime to Live
    5. EIP ID field
  8. 8You are considering purchasing a VPN solution to protect your organization’s information assets. The solution you are reviewing uses RFC-compliant and open-standards encryption schemes. The vendor has submitted the system to a variety of recognized testing authorities. The vendor does not make the source code available to testing authorities. Does this solution adhere to the secure design principle of open design?
    1. ANo, because the software vendor could have changed the code after testing, which is not verifiable.
    2. BNo, because the software vendor submitted the software to testing authorities only, and did not make the software available to the public for testing.
    3. Cecause the methods were tested by recognized testing authorities, and the source code is protected from vandalism.
    4. DYes, because the methods are open, and the system does not rely on the secrecy of its internal mechanisms to provide protection.
    5. ENo, because if a software vendor refuses to reveal the source code for a product, it cannot comply with the open-design principle.
  9. 9Which of the following is NOT a Business Continuity Plan (BCP) recovery strategy?
    1. ADelegating risk to another entity, such as an insurer
    2. BManual procedures; alternative solution to technology available
    3. CDeferring action; action waiting until a later date
    4. DReciprocal agreements with another organization
    5. EDoing nothing; no action taken to recover the technology
  10. 10At ABC Corporation, access to critical information resources, such as database and e-mail servers, is controlled by the information-technology (IT) department. The supervisor in the department grants access to printers where the printer is located. Managers grant and revoke rights to files within their departments’ directories on the file server, but the IT department controls who has access to the directories. Which type of access-management system is in use at ABC Corporation?
    1. ACentralized access management
    2. BRole-based access management
    3. CHybrid access management
    4. DDecentralized access management
    5. EPrivileged access management

Information

Description
2 CISSP Quiz on CISSP Master, created by Rob pol on 18/06/2016.
Author
Rob pol
Language
English
Views
5
Tags
cissp2
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?