CISSP ISC2 Exam Questions and Free Practice Test

Question 79

- (Exam Topic 11)
What should happen when an emergency change to a system must be performed?

A. The change must be given priority at the next meeting of the change control board.

B. Testing and approvals must be performed quickly.

C. The change must be performed immediately and then submitted to the change board.

D. The change is performed and a notation is made in the system log.

Correct Answer:B

Question 80

- (Exam Topic 9)
Which of the following is the best practice for testing a Business Continuity Plan (BCP)?

A. Test before the IT Audit

B. Test when environment changes

C. Test after installation of security patches

D. Test after implementation of system patches

Correct Answer:B

Question 81

- (Exam Topic 13)
Match the name of access control model with its associated restriction.
Drag each access control model to its appropriate restriction access on the right.
CISSP dumps exhibit
Solution:

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 82

- (Exam Topic 9)
Why MUST a Kerberos server be well protected from unauthorized access?

A. It contains the keys of all clients.

B. It always operates at root privilege.

C. It contains all the tickets for services.

D. It contains the Internet Protocol (IP) address of all network entities.

Correct Answer:A

Question 83

- (Exam Topic 11)
After acquiring the latest security updates, what must be done before deploying to production systems?

A. Use tools to detect missing system patches

B. Install the patches on a test system

C. Subscribe to notifications for vulnerabilities

D. Assess the severity of the situation

Correct Answer:B

Question 84

- (Exam Topic 12)
Which of the following BEST represents the concept of least privilege?

A. Access to an object is denied unless access is specifically allowed.

B. Access to an object is only available to the owner.

C. Access to an object is allowed unless it is protected by the information security policy.

D. Access to an object is only allowed to authenticated users via an Access Control List (ACL).

Correct Answer:A

START CISSP EXAM