CISSP ISC2 Exam Questions and Free Practice Test

Question 31

- (Exam Topic 10)
A large university needs to enable student access to university resources from their homes. Which of the following provides the BEST option for low maintenance and ease of deployment?

A. Provide students with Internet Protocol Security (IPSec) Virtual Private Network (VPN) client software.

B. Use Secure Sockets Layer (SSL) VPN technology.

C. Use Secure Shell (SSH) with public/private keys.

D. Require students to purchase home router capable of VPN.

Correct Answer:B

Question 32

- (Exam Topic 13)
Which of the following is the MOST effective method to mitigate Cross-Site Scripting (XSS) attacks?

A. Use Software as a Service (SaaS)

B. Whitelist input validation

C. Require client certificates

D. Validate data output

Correct Answer:B

Question 33

- (Exam Topic 10)
Which of the following is the PRIMARY benefit of a formalized information classification program?

A. It drives audit processes.

B. It supports risk assessment.

C. It reduces asset vulnerabilities.

D. It minimizes system logging requirements.

Correct Answer:B

Question 34

- (Exam Topic 13)
What does electronic vaulting accomplish?

A. It protects critical files.

B. It ensures the fault tolerance of Redundant Array of Independent Disks (RAID) systems

C. It stripes all database records

D. It automates the Disaster Recovery Process (DRP)

Correct Answer:A
Section: Security Operations

Question 35

- (Exam Topic 11)
Order the below steps to create an effective vulnerability management process.
CISSP dumps exhibit
Solution:

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 36

- (Exam Topic 9)
Which of the following assessment metrics is BEST used to understand a system's vulnerability to potential exploits?

A. Determining the probability that the system functions safely during any time period

B. Quantifying the system's available services

C. Identifying the number of security flaws within the system

D. Measuring the system's integrity in the presence of failure

Correct Answer:C

START CISSP EXAM