CISSP exam

Which of the following MUST be part of a contract to support electronic discovery of data stored in a cloud environment?A . Integration with organizational directory services for authenticationB . Tokenization of dataC . Accommodation of hybrid deployment modelsD . Identification of data locationView AnswerAnswer: D

Which of the following can BEST prevent security flaws occurring in outsourced software development?A . Contractual requirements for code qualityB . Licensing, code ownership and intellectual property rightsC . Certification of the quality and accuracy of the work doneD . Delivery dates, change management control and budgetary controlView AnswerAnswer: C

Which of the following BEST represents the principle of open design?A . Disassembly, analysis, or reverse engineering will reveal the security functionality of the computer system.B . Algorithms must be protected to ensure the security and interoperability of the designed system.C . A knowledgeable user should have limited privileges on...

Why must all users be positively identified prior to using multi-user computers?A . To provide access to system privilegesB . To provide access to the operating systemC . To ensure that unauthorized persons cannot access the computersD . To ensure that management knows what users are currently logged onView AnswerAnswer:...

The goal of software assurance in application development is toA . enable the development of High Availability (HA) systems.B . facilitate the creation of Trusted Computing Base (TCB) systems.C . prevent the creation of vulnerable applications.D . encourage the development of open source applications.View AnswerAnswer: C

The BEST method of demonstrating a company's security level to potential customers isA . a report from an external auditor.B . responding to a customer's security questionnaire.C . a formal report from an internal auditor.D . a site visit by a customer's security team.View AnswerAnswer: A

Which of the following is a web application control that should be put into place to prevent exploitation of Operating System (OS) bugs?A . Check arguments in function callsB . Test for the security patch level of the environmentC . Include logging functionsD . Digitally sign each application moduleView AnswerAnswer:...

Which of the following types of business continuity tests includes assessment of resilience to internal and external risks without endangering live operations?A . WalkthroughB . SimulationC . ParallelD . White boxView AnswerAnswer: C

The birthday attack is MOST effective against which one of the following cipher technologies?A . Chaining block encryptionB . Asymmetric cryptographyC . Cryptographic hashD . Streaming cryptographyView AnswerAnswer: C

An advantage of link encryption in a communications network is that itA . makes key management and distribution easier.B . protects data from start to finish through the entire network.C . improves the efficiency of the transmission.D . encrypts all information, including headers and routing information.View AnswerAnswer: D