CISSP ISC2 Exam Questions and Free Practice Test

Question 145

- (Exam Topic 9)
An engineer in a software company has created a virus creation tool. The tool can generate thousands of polymorphic viruses. The engineer is planning to use the tool in a controlled environment to test the company's next generation virus scanning software. Which would BEST describe the behavior of the engineer and why?

A. The behavior is ethical because the tool will be used to create a better virus scanner.

B. The behavior is ethical because any experienced programmer could create such a tool.

C. The behavior is not ethical because creating any kind of virus is bad.

D. The behavior is not ethical because such a tool could be leaked on the Internet.

Correct Answer:A

Question 146

- (Exam Topic 12)
Which of the following adds end-to-end security inside a Layer 2 Tunneling Protocol (L2TP) Internet Protocol Security (IPSec) connection?

A. Temporal Key Integrity Protocol (TKIP)

B. Secure Hash Algorithm (SHA)

C. Secure Shell (SSH)

D. Transport Layer Security (TLS)

Correct Answer:B

Question 147

- (Exam Topic 12)
When building a data classification scheme, which of the following is the PRIMARY concern?

A. Purpose

B. Cost effectiveness

C. Availability

D. Authenticity

Correct Answer:D

Question 148

- (Exam Topic 10)
Which of the following is the MOST crucial for a successful audit plan?

A. Defining the scope of the audit to be performed

B. Identifying the security controls to be implemented

C. Working with the system owner on new controls

D. Acquiring evidence of systems that are not compliant

Correct Answer:A

Question 149

- (Exam Topic 9)
Which one of the following is a threat related to the use of web-based client side input validation?

A. Users would be able to alter the input after validation has occurred

B. The web server would not be able to validate the input after transmission

C. The client system could receive invalid input from the web server

D. The web server would not be able to receive invalid input from the client

Correct Answer:A

Question 150

- (Exam Topic 13)
Which of the following is MOST appropriate for protecting confidentially of data stored on a hard drive?

A. Triple Data Encryption Standard (3DES)

B. Advanced Encryption Standard (AES)

C. Message Digest 5 (MD5)

D. Secure Hash Algorithm 2(SHA-2)

Correct Answer:B

START CISSP EXAM