Online Access Free CISSP Exam Questions

Management has decided that a core application will be used on personal cellular phones. As an implementation requirement, regularly scheduled analysis of the security posture needs to be conducted. Management has also directed that continuous monitoring be implemented. Which of the following is required to accomplish management's directive?

• A.Routine reports generated by the user's cellular phone provider that detail security events
• B.Strict integration of application management, configuration management (CM), and phone management
• C.Enterprise-level security information and event management (SIEM) dashboard that provides full visibility of cellular phone activity
• D.Management application installed on user phones that tracks all application events and cellular traffic

Which of the following is the primary advantage of segmenting Virtual Machines (VM) using physical networks?

• A.Simplicity of network configuration and network monitoring
• B.Removes the need for dedicated virtual security controls
• C.Simplicity of network configuration and network redundancy
• D.Removes the need for decentralized management solutions

What testing technique enables the designer to develop mitigation strategies for potential vulnerabilities?

• A.Threat modeling
• B.Manual inspections and reviews
• C.Source code review
• D.Penetration testing

A bank failed to meet service-level agreements (SLA) with customers after suffering from a database failure of the transaction processing system (TPS) that resulted in delayed financial deposits. A regulatory agency overseeing the bank would like to determine if the cause of the delay was a material weakness. Which of the following documents is MOST relevant for the regulatory agency to review?

• A.Continuity of Operations Plan (COOP)
• B.Enterprise resource planning (ERP)
• C.Business impact analysis (BIA)
• D.Business continuity plan (BCP)

Which of the following is the BEST way to reduce the impact of an externally sourced flood attack?

• A.Block the source address at the firewall.
• B.Have the soiree service provider block the address.
• C.Block all inbound traffic until the flood ends.
• D.Have the service provider block the soiree address.