Question 1

Which of the following mandates the amount and complexity of security controls applied to a security risk?

Accepted Answer

A)  Security vulnerabilities 
B)  Risk tolerance 
C)  Risk mitigation 
D)  Security staff 
A)  Security vulnerabilities 
B)  Risk tolerance 
C)  Risk mitigation 
D)  Security staff

Question 2

In a change-controlled environment, which of the following is MOST likely to lead to unauthorized changes to production programs?

Accepted Answer

A)  Modifying source code without approval 
B)  Promoting programs to production without approval 
C)  Developers checking out source code without approval 
D)  Developers using Rapid Application Development (RA
D)  methodologies without approval 
A)  Modifying source code without approval 
B)  Promoting programs to production without approval 
C)  Developers checking out source code without approval 
D)  Developers using Rapid Application Development (RA
D)  methodologies without approval

Question 3

What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?

Accepted Answer

A)  To ensure Information Technology (IT) staff knows and performs roles assigned to each of them 
B)  To validate backup sites' effectiveness 
C)  To find out what does not work and fix it 
D)  To create a high level DRP awareness among Information Technology (IT) staff 
A)  To ensure Information Technology (IT) staff knows and performs roles assigned to each of them 
B)  To validate backup sites' effectiveness 
C)  To find out what does not work and fix it 
D)  To create a high level DRP awareness among Information Technology (IT) staff

Question 4

Which of the following provides the GREATEST level of data security for a Virtual Private Network (VPN) connection?

Accepted Answer

A)  Internet Protocol Payload Compression (IPComp) 
B)  Internet Protocol Security (IPSec) 
C)  Extensible Authentication Protocol (EAP) 
D)  Remote Authentication Dial-In User Service (RADIUS) 
A)  Internet Protocol Payload Compression (IPComp) 
B)  Internet Protocol Security (IPSec) 
C)  Extensible Authentication Protocol (EAP) 
D)  Remote Authentication Dial-In User Service (RADIUS)

Question 5

Which one of the following affects the classification of data?

Accepted Answer

A)  Assigned security label 
B)  Multilevel Security (MLS) architecture 
C)  Minimum query size 
D)  Passage of time 
A)  Assigned security label 
B)  Multilevel Security (MLS) architecture 
C)  Minimum query size 
D)  Passage of time

Question 6

Which one of the following is an advantage of an effective release control strategy form a configuration control standpoint?

Accepted Answer

A)  Ensures that a trace for all deliverables is maintained and auditable 
B)  Enforces backward compatibility between releases 
C)  Ensures that there is no loss of functionality between releases 
D)  Allows for future enhancements to existing features 
A)  Ensures that a trace for all deliverables is maintained and auditable 
B)  Enforces backward compatibility between releases 
C)  Ensures that there is no loss of functionality between releases 
D)  Allows for future enhancements to existing features

Question 7

Digital certificates used in Transport Layer Security (TLS) support which of the following?

Accepted Answer

A)  Information input validation 
B)  Non-repudiation controls and data encryption 
C)  Multi-Factor Authentication (MF
A)  
D)  Server identity and data confidentially 
A)  Information input validation 
B)  Non-repudiation controls and data encryption 
C)  Multi-Factor Authentication (MF
A)  
D)  Server identity and data confidentially

Question 8

What is the BEST way to establish identity over the Internet?

Accepted Answer

A)  Challenge Handshake Authentication Protocol (CHAP) and strong passwords 
B)  Remote Authentication Dial-In User Service (RADIUS) server with hardware tokens 
C)  Internet Message Access Protocol (IMAP) with Triple Data Encryption Standard (3DES) 
D)  Remote user authentication via Simple Object Access Protocol (SOAP) 
A)  Challenge Handshake Authentication Protocol (CHAP) and strong passwords 
B)  Remote Authentication Dial-In User Service (RADIUS) server with hardware tokens 
C)  Internet Message Access Protocol (IMAP) with Triple Data Encryption Standard (3DES) 
D)  Remote user authentication via Simple Object Access Protocol (SOAP)

Question 9

Which of the following is the BEST method to prevent malware from being introduced into a production environment?

Accepted Answer

A)  Purchase software from a limited list of retailers 
B)  Verify the hash key or certificate key of all updates 
C)  Do not permit programs, patches, or updates from the Internet 
D)  Test all new software in a segregated environment 
A)  Purchase software from a limited list of retailers 
B)  Verify the hash key or certificate key of all updates 
C)  Do not permit programs, patches, or updates from the Internet 
D)  Test all new software in a segregated environment

Question 10

Which of the following provides the MOST secure method for Network Access Control (NAC)?

Accepted Answer

A)  Media Access Control (MA
C)  filtering 
B)  802.1X authentication 
C)  Application layer filtering 
D)  Network Address Translation (NAT) 
A)  Media Access Control (MA
C)  filtering 
B)  802.1X authentication 
C)  Application layer filtering 
D)  Network Address Translation (NAT)

Question 11

Compared with hardware cryptography, software cryptography is generally

Accepted Answer

A)  less expensive and slower. 
B)  more expensive and faster. 
C)  more expensive and slower. 
D)  less expensive and faster. 
A)  less expensive and slower. 
B)  more expensive and faster. 
C)  more expensive and slower. 
D)  less expensive and faster.

Question 12

A system with Internet Protocol (IP) address 10.102.10.2 has a physical address of 00:00:08:00:12:13:14:2f. The following static entry is added to its Address Resolution Protocol (ARP) table: 10.102.10.6: 00:00:08:00:12:13:14:2f. What form of attack could this represent?

Accepted Answer

A)  A Denial of Service (DoS) attack against the gateway router because the router can no longer accept packets from 10.102.10.2 
B)  A transport layer attack that prevents the resolution of 10.102.10.6 address 
C)  A Denial of Service (DoS) attack against 10.102.10.2 because it cannot respond correctly to ARP requests 
D)  A masquerading attack that sends packets intended for 10.102.10.6 to 10.102.10.2 
A)  A Denial of Service (DoS) attack against the gateway router because the router can no longer accept packets from 10.102.10.2 
B)  A transport layer attack that prevents the resolution of 10.102.10.6 address 
C)  A Denial of Service (DoS) attack against 10.102.10.2 because it cannot respond correctly to ARP requests 
D)  A masquerading attack that sends packets intended for 10.102.10.6 to 10.102.10.2

Question 13

Which of the following types of data would be MOST difficult to detect by a forensic examiner?

Accepted Answer

A)  Slack space data 
B)  Steganographic data 
C)  File system deleted data 
D)  Data stored with a different file type extension 
A)  Slack space data 
B)  Steganographic data 
C)  File system deleted data 
D)  Data stored with a different file type extension

Question 14

The goal of a Business Impact Analysis (BIA) is to determine which of the following?

Accepted Answer

A)  Cost effectiveness of business recovery 
B)  Cost effectiveness of installing software security patches 
C)  Resource priorities for recovery and Maximum Tolerable Downtime (MT
D)  
D)  Which security measures should be implemented 
A)  Cost effectiveness of business recovery 
B)  Cost effectiveness of installing software security patches 
C)  Resource priorities for recovery and Maximum Tolerable Downtime (MT
D)  
D)  Which security measures should be implemented

Question 15

A company-wide penetration test result shows customers could access and read files through a web browser. Which of the following can be used to mitigate this vulnerability?

Accepted Answer

A)  Enforce the chmod of files to 755 
B)  Enforce the control of file directory listings 
C)  Implement access control on the web server 
D)  Implement Secure Sockets Layer (SSL) certificates throughout the web server 
A)  Enforce the chmod of files to 755 
B)  Enforce the control of file directory listings 
C)  Implement access control on the web server 
D)  Implement Secure Sockets Layer (SSL) certificates throughout the web server

Question 16

Which of the following is the final phase of the identity and access provisioning lifecycle?

Accepted Answer

A)  Recertification 
B)  Revocation 
C)  Removal 
D)  Validation 
A)  Recertification 
B)  Revocation 
C)  Removal 
D)  Validation

Question 17

The organization would like to deploy an authorization mechanism for an Information Technology (IT) infrastructure project with high employee turnover. Which access control mechanism would be preferred?

Accepted Answer

A)  Attribute Based Access Control (ABA
C)  
B)  Discretionary Access Control (DA
C)  
C)  Mandatory Access Control (MA
C)  
D)  Role-Based Access Control (RBA
C)  
A)  Attribute Based Access Control (ABA
C)  
B)  Discretionary Access Control (DA
C)  
C)  Mandatory Access Control (MA
C)  
D)  Role-Based Access Control (RBA
C)

Question 18

Which of the following is the MOST important security goal when performing application interface testing?

Accepted Answer

A)  Confirm that all platforms are supported and function properly 
B)  Evaluate whether systems or components pass data and control correctly to one another 
C)  Verify compatibility of software, hardware, and network connections 
D)  Examine error conditions related to external interfaces to prevent application details leakage 
A)  Confirm that all platforms are supported and function properly 
B)  Evaluate whether systems or components pass data and control correctly to one another 
C)  Verify compatibility of software, hardware, and network connections 
D)  Examine error conditions related to external interfaces to prevent application details leakage

Question 19

A database administrator is asked by a high-ranking member of management to perform specific changes to the accounting system database. The administrator is specifically instructed to not track or evidence the change in a ticket. Which of the following is the BEST course of action?

Accepted Answer

A)  Ignore the request and do not perform the change. 
B)  Perform the change as requested, and rely on the next audit to detect and report the situation. 
C)  Perform the change, but create a change ticket regardless to ensure there is complete traceability. 
D)  Inform the audit committee or internal audit directly using the corporate whistleblower process. 
A)  Ignore the request and do not perform the change. 
B)  Perform the change as requested, and rely on the next audit to detect and report the situation. 
C)  Perform the change, but create a change ticket regardless to ensure there is complete traceability. 
D)  Inform the audit committee or internal audit directly using the corporate whistleblower process.

Question 20

What is the best way for mutual authentication of devices belonging to the same organization?

Accepted Answer

A)  Token 
B)  Certificates 
C)  User ID and passwords 
D)  Biometric 
A)  Token 
B)  Certificates 
C)  User ID and passwords 
D)  Biometric

Which of the following mandates the amount and complexity of security controls applied to a security risk?

In a change-controlled environment, which of the following is MOST likely to lead to unauthorized changes to production programs?

What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?

Which of the following provides the GREATEST level of data security for a Virtual Private Network (VPN) connection?

Which one of the following affects the classification of data?

Which one of the following is an advantage of an effective release control strategy form a configuration control standpoint?

Digital certificates used in Transport Layer Security (TLS) support which of the following?

What is the BEST way to establish identity over the Internet?

Which of the following is the BEST method to prevent malware from being introduced into a production environment?

Which of the following provides the MOST secure method for Network Access Control (NAC)?

Compared with hardware cryptography, software cryptography is generally

A system with Internet Protocol (IP) address 10.102.10.2 has a physical address of 00:00:08:00:12:13:14:2f. The following static entry is added to its Address Resolution Protocol (ARP) table: 10.102.10.6: 00:00:08:00:12:13:14:2f. What form of attack could this represent?

Which of the following types of data would be MOST difficult to detect by a forensic examiner?

The goal of a Business Impact Analysis (BIA) is to determine which of the following?

A company-wide penetration test result shows customers could access and read files through a web browser. Which of the following can be used to mitigate this vulnerability?

Which of the following is the final phase of the identity and access provisioning lifecycle?

The organization would like to deploy an authorization mechanism for an Information Technology (IT) infrastructure project with high employee turnover. Which access control mechanism would be preferred?

Which of the following is the MOST important security goal when performing application interface testing?

A database administrator is asked by a high-ranking member of management to perform specific changes to the accounting system database. The administrator is specifically instructed to not track or evidence the change in a ticket. Which of the following is the BEST course of action?

What is the best way for mutual authentication of devices belonging to the same organization?

Certified Authorization Professional

Certified Cloud Security Professional (CCSP)

Filters

Exam 3: Certified Information Systems Security Professional

Which of the following mandates the amount and complexity of security controls applied to a security risk?

In a change-controlled environment, which of the following is MOST likely to lead to unauthorized changes to production programs?

What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?

Which of the following provides the GREATEST level of data security for a Virtual Private Network (VPN) connection?

Which one of the following affects the classification of data?

Which one of the following is an advantage of an effective release control strategy form a configuration control standpoint?

Digital certificates used in Transport Layer Security (TLS) support which of the following?

What is the BEST way to establish identity over the Internet?

Which of the following is the BEST method to prevent malware from being introduced into a production environment?

Which of the following provides the MOST secure method for Network Access Control (NAC)?

Compared with hardware cryptography, software cryptography is generally

A system with Internet Protocol (IP) address 10.102.10.2 has a physical address of 00:00:08:00:12:13:14:2f. The following static entry is added to its Address Resolution Protocol (ARP) table: 10.102.10.6: 00:00:08:00:12:13:14:2f. What form of attack could this represent?

Which of the following types of data would be MOST difficult to detect by a forensic examiner?

The goal of a Business Impact Analysis (BIA) is to determine which of the following?

A company-wide penetration test result shows customers could access and read files through a web browser. Which of the following can be used to mitigate this vulnerability?

Which of the following is the final phase of the identity and access provisioning lifecycle?

The organization would like to deploy an authorization mechanism for an Information Technology (IT) infrastructure project with high employee turnover. Which access control mechanism would be preferred?

Which of the following is the MOST important security goal when performing application interface testing?

A database administrator is asked by a high-ranking member of management to perform specific changes to the accounting system database. The administrator is specifically instructed to not track or evidence the change in a ticket. Which of the following is the BEST course of action?

What is the best way for mutual authentication of devices belonging to the same organization?

Certified Authorization Professional

Certified Cloud Security Professional (CCSP)

Filters