Online Access Free CISSP Exam Questions

Which of the following BEST describes the purpose of "Egress Point Data Sanitization Verification"?

• A.A process performed only for paper records, not digital media
• B.Assuming that a "delete" command permanently removes all traces of data without further verification
• C.Encrypting data as an alternative to sanitization
• D.Formally verifying, through techniques such as sampling or certification, that data sanitization or media destruction processes were actually effective before media is reused, sold, or disposed of

Which of the following is an indicator that a company's new user security awareness training module has been effective?

• A.There are more secure connections to internal e-mail servers.
• B.More incidents of phishing attempts are being reported.
• C.Fewer incidents of phishing attempts are being reported.
• D.There are more secure connections to the internal database servers.

Which of the following BEST describes a "zero-day" vulnerability?

• A.A vulnerability that has been publicly disclosed and patched
• B.A vulnerability that requires physical access to exploit
• C.A vulnerability found only in legacy systems
• D.A vulnerability that is exploited before the vendor is aware of it or has released a patch

A large corporation is locking for a solution to automate access based on where on request is coming from, who the user is, what device they are connecting with, and what time of day they are attempting this access. What type of solution would suit their needs?

• A.Discretionary Access Control (DAC)
• B.Role Based Access Control (RBAC)
• C.Network Access Control (NAC)
• D.Mandater Access Control (MAC)

Which of the following BEST describes "Immutable Infrastructure" as a modern deployment approach?

• A.An approach where servers or components are never modified after deployment; instead, changes are made by deploying entirely new, replacement instances built from a version-controlled image
• B.A deployment model used exclusively for physical, on-premises hardware
• C.Infrastructure that is manually patched and updated in place over time
• D.Infrastructure that cannot be monitored or logged