CISSP ISC2 Exam Questions and Free Practice Test

Question 67

- (Exam Topic 13)
Which of the following mandates the amount and complexity of security controls applied to a security risk?

A. Security vulnerabilities

B. Risk tolerance

C. Risk mitigation

D. Security staff

Correct Answer:C

Question 68

- (Exam Topic 11)
An organization is found lacking the ability to properly establish performance indicators for its Web hosting solution during an audit. What would be the MOST probable cause?

A. Improper deployment of the Service-Oriented Architecture (SOA)

B. Absence of a Business Intelligence (BI) solution

C. Inadequate cost modeling

D. Insufficient Service Level Agreement (SLA)

Correct Answer:D

Question 69

- (Exam Topic 11)
Which of the following disaster recovery test plans will be MOST effective while providing minimal risk?

A. Read-through

B. Parallel

C. Full interruption

D. Simulation

Correct Answer:B

Question 70

- (Exam Topic 10)
Which of the following BEST mitigates a replay attack against a system using identity federation and Security Assertion Markup Language (SAML) implementation?

A. Two-factor authentication

B. Digital certificates and hardware tokens

C. Timed sessions and Secure Socket Layer (SSL)

D. Passwords with alpha-numeric and special characters

Correct Answer:C

Question 71

- (Exam Topic 9)
Which of the following does Temporal Key Integrity Protocol (TKIP) support?

A. Multicast and broadcast messages

B. Coordination of IEEE 802.11 protocols

C. Wired Equivalent Privacy (WEP) systems

D. Synchronization of multiple devices

Correct Answer:C

Question 72

- (Exam Topic 7)
Which of the following is a PRIMARY advantage of using a third-party identity service?

A. Consolidation of multiple providers

B. Directory synchronization

C. Web based logon

D. Automated account management

Correct Answer:D

START CISSP EXAM