★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW CISSP Exam Dumps (PDF & VCE):
Available on: https://www.certleader.com/CISSP-dumps.html


Act now and download your ISC2 CISSP test today! Do not waste time for the worthless ISC2 CISSP tutorials. Download Refresh ISC2 Certified Information Systems Security Professional (CISSP) exam with real questions and answers and begin to learn ISC2 CISSP with a classic professional.

2021 Mar CISSP test question

Q71. A system has been scanned for vulnerabilities and has been found to contain a number of communication ports that have been opened without authority. To which of the following might this system have been subjected? 

A. Trojan horse 

B. Denial of Service (DoS) 

C. Spoofing 

D. Man-in-the-Middle (MITM) 

Answer: A 


Q72. Which of the following wraps the decryption key of a full disk encryption implementation and ties the hard disk drive to a particular device? 

A. Trusted Platform Module (TPM) 

B. Preboot eXecution Environment (PXE) 

C. Key Distribution Center (KDC) 

D. Simple Key-Management for Internet Protocol (SKIP) 

Answer: A 


Q73. Which of the following is considered best.practice.for preventing e-mail spoofing? 

A. Spam filtering 

B. Cryptographic signature 

C. Uniform Resource Locator (URL) filtering 

D. Reverse Domain Name Service (DNS) lookup 

Answer: B 


Q74. Refer.to the information below to answer the question.

.A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provider’s facility. This provider will be responsible for the design, development, testing, and support of several critical, customer-based applications used by the organization. 

The organization should ensure that the third party's physical security controls are in place so that they 

A. are more rigorous.than the original controls. 

B. are able to limit access to sensitive information. 

C. allow access by the organization staff at any time. 

D. cannot be accessed by subcontractors of the third party. 

Answer: B 


Q75. Which of the following methods provides the MOST protection for user credentials? 

A. Forms-based authentication 

B. Digest authentication 

C. Basic authentication 

D. Self-registration 

Answer: B 


Up to date CISSP dumps:

Q76. Refer.to the information below to answer the question. 

In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files. 

In a Bell-LaPadula system, which user has the MOST restrictions when writing data to any of the four files? 

A. User A 

B. User B 

C. User C 

D. User D 

Answer: D 


Q77. What would be the PRIMARY concern when designing and coordinating a security assessment for an Automatic Teller Machine (ATM) system? 

A. Physical access to the electronic hardware 

B. Regularly scheduled maintenance process 

C. Availability of the network connection 

D. Processing delays 

Answer: A 


Q78. An auditor carrying out a compliance audit requests passwords that are encrypted in the system to verify that the passwords are compliant with policy. Which of the following is the BEST response to the auditor? 

A. Provide the encrypted passwords and analysis tools to the auditor for analysis. 

B. Analyze the encrypted passwords for the auditor and show them the results. 

C. Demonstrate that non-compliant passwords cannot be created in the system. 

D. Demonstrate that non-compliant passwords cannot be encrypted in the system. 

Answer: C 


Q79. Refer.to the information below to answer the question. 

An organization has hired an information security officer to lead their security department. The officer has adequate people resources but is lacking the other necessary components to have an effective security program. There are numerous initiatives requiring security involvement. 

The effectiveness of the security program can PRIMARILY be measured through 

A. audit findings. 

B. risk elimination. 

C. audit requirements. 

D. customer satisfaction. 

Answer: A 


Q80. The amount of data that will be collected during an audit is PRIMARILY determined by the 

A. audit scope. 

B. auditor's experience level. 

C. availability of the data. 

D. integrity of the data. 

Answer: A