Exam 3: Certified Information Systems Security Professional

Which of the following is MOST effective in detecting information hiding in Transmission Control Protocol/Internet Protocol (TCP/IP) traffic?

Which of the following is the BEST network defense against unknown types of attacks or stealth attacks in progress?

What is the purpose of code signing?

How does security in a distributed file system using mutual authentication differ from file security in a multi-user host?

A security team member was selected as a member of a Change Control Board (CCB) for an organization. Which of the following is one of their responsibilities?

An Information Technology (IT) professional attends a cybersecurity seminar on current incident response methodologies. What code of ethics canon is being observed?

Which of the following is the BEST way to protect against Structured Query Language (SQL) injection?

An Intrusion Detection System (IDS) has recently been deployed in a Demilitarized Zone (DMZ). The IDS detects a flood of malformed packets. Which of the following BEST describes what has occurred?

A security consultant has been hired by a company to establish its vulnerability management program. The consultant is now in the deployment phase. Which of the following tasks is part of this process?

Which of the following phases involves researching a target's configuration from public sources when performing a penetration test?

Point-to-Point Protocol (PPP) was designed to specifically address what issue?

What should an auditor do when conducting a periodic audit on media retention?

What is the BEST location in a network to place Virtual Private Network (VPN) devices when an internal review reveals network design flaws in remote access?

Which of the following is the MOST important output from a mobile application threat modeling exercise according to Open Web Application Security Project (OWASP)?

Which Redundant Array of Independent Disks (RAID) Level does the following diagram represent?

Which one of the following data integrity models assumes a lattice of integrity levels?

Asymmetric algorithms are used for which of the following when using Secure Sockets Layer/Transport Layer Security (SSL/TLS) for implementing network security?

How does Encapsulating Security Payload (ESP) in transport mode affect in the Internet Protocol (IP)?

What does the term "100-year floodplain" mean to emergency preparedness officials?

Which of the following is used to support the concept of defense in depth during the development phase of a software product?