CISSP ISC2 Exam Questions and Free Practice Test

Question 157

- (Exam Topic 11)
Which Web Services Security (WS-Security) specification maintains a single authenticated identity across multiple dissimilar environments? Click on the correct specification in the image below.
CISSP dumps exhibit
Solution:
WS-Federation
Reference: Java Web Services: Up and Running” By Martin Kalin page 228

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 158

- (Exam Topic 10)
Refer to the information below to answer the question.
A new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a child that uses the computer to send and receive e-mail, search the web, and use instant messaging. The organization’s Information Technology (IT) department discovers that a peer-to-peer program has been installed on the computer using the employee's access.
Which of the following methods is the MOST effective way of removing the Peer-to-Peer (P2P) program from the computer?

A. Run software uninstall

B. Re-image the computer

C. Find and remove all installation files

D. Delete all cookies stored in the web browser cache

Correct Answer:B

Question 159

- (Exam Topic 10)
What is the MOST effective method for gaining unauthorized access to a file protected with a long complex password?

A. Brute force attack

B. Frequency analysis

C. Social engineering

D. Dictionary attack

Correct Answer:C

Question 160

- (Exam Topic 11)
Which of the following is the PRIMARY benefit of implementing data-in-use controls?

A. If the data is lost, it must be decrypted to be opened.

B. If the data is lost, it will not be accessible to unauthorized users.

C. When the data is being viewed, it can only be printed by authorized users.

D. When the data is being viewed, it must be accessed using secure protocols.

Correct Answer:C

START CISSP EXAM