CISSP ISC2 Exam Questions and Free Practice Test

Question 103

- (Exam Topic 9)
When designing a networked Information System (IS) where there will be several different types of individual access, what is the FIRST step that should be taken to ensure all access control requirements are addressed?

A. Create a user profile.

B. Create a user access matrix.

C. Develop an Access Control List (ACL).

D. Develop a Role Based Access Control (RBAC) list.

Correct Answer:B

Question 104

- (Exam Topic 10)
Which of the following is a MAJOR consideration in implementing a Voice over IP (VoIP) network?

A. Use of a unified messaging.

B. Use of separation for the voice network.

C. Use of Network Access Control (NAC) on switches.

D. Use of Request for Comments (RFC) 1918 addressing.

Correct Answer:B

Question 105

- (Exam Topic 12)
Which of the following is the PRIMARY benefit of a formalized information classification program?

A. It minimized system logging requirements.

B. It supports risk assessment.

C. It reduces asset vulnerabilities.

D. It drives audit processes.

Correct Answer:B

Question 106

- (Exam Topic 10)
What is the BEST first step for determining if the appropriate security controls are in place for protecting data at rest?

A. Identify regulatory requirements

B. Conduct a risk assessment

C. Determine business drivers

D. Review the security baseline configuration

Correct Answer:B

Question 107

- (Exam Topic 2)
Which of the following is an initial consideration when developing an information security management system?

A. Identify the contractual security obligations that apply to the organizations

B. Understand the value of the information assets

C. Identify the level of residual risk that is tolerable to management

D. Identify relevant legislative and regulatory compliance requirements

Correct Answer:B

Question 108

- (Exam Topic 13)
“Stateful” differs from “Static” packet filtering firewalls by being aware of which of the following?

A. Difference between a new and an established connection

B. Originating network location

C. Difference between a malicious and a benign packet payload

D. Originating application session

Correct Answer:A

START CISSP EXAM