Exam 3: Certified Information Systems Security Professional

Vulnerability scanners may allow for the administrator to assign which of the following in order to assist in prioritizing remediation activities?

For the purpose of classification, which of the following is used to divide trust domain and trust boundaries?

A security professional recommends that a company integrate threat modeling into its Agile development processes. Which of the following BEST describes the benefits of this approach?

Which of the following BEST represents the concept of least privilege?

A user downloads a file from the Internet, then applies the Secure Hash Algorithm 3 (SHA-3) to it. Which of the following is the MOST likely reason for doing so?

Which of the following models uses unique groups contained in unique conflict classes?

Why would a security architect specify that a default route pointing to a sinkhole be injected into internal networks?

Which of the following is a benefit in implementing an enterprise Identity and Access Management (IAM) solution?

What capability would typically be included in a commercially available software package designed for access control?

Which of the following steps should be conducted during the FIRST phase of software assurance in a generic acquisition process?

Why might a network administrator choose distributed virtual switches instead of stand-alone switches for network segmentation?

What requirement MUST be met during internal security audits to ensure that all information provided is expressed as an objective assessment without risk of retaliation?

Which of the following is the PRIMARY issue when analyzing detailed log information?

Which of the following MUST a security policy include to be effective within an organization?

Which of the following is the MOST secure protocol for remote command access to the firewall?

What is the PRIMARY objective of an application security assessment?

A project requires the use of an authentication mechanism where playback must be protected and plaintext secret must be used. Which of the following should be used?

Which of the following is a peer entity authentication method for Point-to-Point Protocol (PPP)?

Which of the following is the MOST challenging issue in apprehending cyber criminals?

An organization has implemented a new backup process which protects confidential data by encrypting the information stored on backup tapes. Which of the following is a MAJOR data confidentiality concern after the implementation of this new backup process?