CISSP ISC2 Exam Questions and Free Practice Test

Question 43

- (Exam Topic 4)
Which of the following is the BEST network defense against unknown types of attacks or stealth attacks in progress?

A. Intrusion Prevention Systems (IPS)

B. Intrusion Detection Systems (IDS)

C. Stateful firewalls

D. Network Behavior Analysis (NBA) tools

Correct Answer:D

Question 44

- (Exam Topic 12)
An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the following is the BEST action to take?

A. Revoke access temporarily.

B. Block user access and delete user account after six months.

C. Block access to the offices immediately.

D. Monitor account usage temporarily.

Correct Answer:D

Question 45

- (Exam Topic 9)
A disadvantage of an application filtering firewall is that it can lead to

A. a crash of the network as a result of user activities.

B. performance degradation due to the rules applied.

C. loss of packets on the network due to insufficient bandwidth.

D. Internet Protocol (IP) spoofing by hackers.

Correct Answer:B

Question 46

- (Exam Topic 9)
The type of authorized interactions a subject can have with an object is

A. control.

B. permission.

C. procedure.

D. protocol.

Correct Answer:B

Question 47

- (Exam Topic 9)
Which one of the following describes granularity?

A. Maximum number of entries available in an Access Control List (ACL)

B. Fineness to which a trusted system can authenticate users

C. Number of violations divided by the number of total accesses

D. Fineness to which an access control system can be adjusted

Correct Answer:D

Question 48

- (Exam Topic 12)
Which of the following is MOST important when deploying digital certificates?

A. Validate compliance with X.509 digital certificate standards

B. Establish a certificate life cycle management framework

C. Use a third-party Certificate Authority (CA)

D. Use no less than 256-bit strength encryption when creating a certificate

Correct Answer:B

START CISSP EXAM