Question 1

What should be used immediately after a Business Continuity Plan (BCP) has been invoked?

Accepted Answer

A)  Emergency procedures describing the necessary actions to be taken following an incident which jeopardizes business operations 
B)  Fallback procedures describing what actions are to be taken to move essential business activities to alternative temporary locations 
C)  Maintenance schedule specifying how and when the plan will be tested and the process for maintaining the plan 
D)  Resumption procedures describing the actions to be taken to return to normal business operations 
A)  Emergency procedures describing the necessary actions to be taken following an incident which jeopardizes business operations 
B)  Fallback procedures describing what actions are to be taken to move essential business activities to alternative temporary locations 
C)  Maintenance schedule specifying how and when the plan will be tested and the process for maintaining the plan 
D)  Resumption procedures describing the actions to be taken to return to normal business operations

Question 2

The implementation of which features of an identity management system reduces costs and administration overhead while improving audit and accountability?

Accepted Answer

A)  Two-factor authentication (2F
A)  
B)  Single sign-on (SSO) 
C)  User self-service 
D)  A metadirectory 
A)  Two-factor authentication (2F
A)  
B)  Single sign-on (SSO) 
C)  User self-service 
D)  A metadirectory

Question 3

Why are packet filtering routers used in low-risk environments?

Accepted Answer

A)  They are high-resolution source discrimination and identification tools 
B)  They are fast and flexible, and protect against Internet Protocol (IP) spoofing 
C)  They are fast, flexible, and transparent 
D)  They enforce strong user authentication and audit log generation 
A)  They are high-resolution source discrimination and identification tools 
B)  They are fast and flexible, and protect against Internet Protocol (IP) spoofing 
C)  They are fast, flexible, and transparent 
D)  They enforce strong user authentication and audit log generation

Question 4

Which of the following processes is used to align security controls with business functions?

Accepted Answer

A)  Data mapping 
B)  Standards selection 
C)  Scoping 
D)  Tailoring 
A)  Data mapping 
B)  Standards selection 
C)  Scoping 
D)  Tailoring

Question 5

Which technique can be used to make an encryption scheme more resistant to a known plaintext attack?

Accepted Answer

A)  Hashing the data before encryption 
B)  Hashing the data after encryption 
C)  Compressing the data after encryption 
D)  Compressing the data before encryption 
A)  Hashing the data before encryption 
B)  Hashing the data after encryption 
C)  Compressing the data after encryption 
D)  Compressing the data before encryption

Question 6

Which of the following is the BEST defense against password guessing?

Accepted Answer

A)  Limit external connections to the network 
B)  Disable the account after a limited number of unsuccessful attempts 
C)  Force the password to be changed after an invalid password has been entered 
D)  Require a combination of letters, numbers, and special characters in the password 
A)  Limit external connections to the network 
B)  Disable the account after a limited number of unsuccessful attempts 
C)  Force the password to be changed after an invalid password has been entered 
D)  Require a combination of letters, numbers, and special characters in the password

Question 7

An organization plan on purchasing a custom software product developed by a small vendor to support its business model. Which unique consideration should be made part of the contractual agreement potential long-term risks associated with creating this dependency?

Accepted Answer

A)  A source code escrow clause 
B)  Right to request an independent review of the software source code 
C)  Due diligence form requesting statements of compliance with security requirements 
D)  Access to the technical documentation 
A)  A source code escrow clause 
B)  Right to request an independent review of the software source code 
C)  Due diligence form requesting statements of compliance with security requirements 
D)  Access to the technical documentation

Question 8

An external attacker has compromised an organization's network security perimeter and installed a sniffer onto an inside computer. Which of the following is the MOST effective layer of security the organization could have implemented to mitigate the attacker's ability to gain further information?

Accepted Answer

A)  Implement packet filtering on the network firewalls 
B)  Install Host Based Intrusion Detection Systems (HIDS) 
C)  Require strong authentication for administrators 
D)  Implement logical network segmentation at the switches 
A)  Implement packet filtering on the network firewalls 
B)  Install Host Based Intrusion Detection Systems (HIDS) 
C)  Require strong authentication for administrators 
D)  Implement logical network segmentation at the switches

Question 9

Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?

Accepted Answer

A)  Identifying the events and environmental factors that can adversely affect an organization 
B)  Identifying what is important and critical based on disruptions that can affect the organization 
C)  Establishing the need for a Business Continuity Plan (BCP) based on threats that can affect an organization 
D)  Preparing a program to create an organizational awareness for executing the Business Continuity Plan (BCP) 
A)  Identifying the events and environmental factors that can adversely affect an organization 
B)  Identifying what is important and critical based on disruptions that can affect the organization 
C)  Establishing the need for a Business Continuity Plan (BCP) based on threats that can affect an organization 
D)  Preparing a program to create an organizational awareness for executing the Business Continuity Plan (BCP)

Question 10

Determining outage costs caused by a disaster can BEST be measured by the

Accepted Answer

A)  cost of redundant systems and backups. 
B)  cost to recover from an outage. 
C)  overall long-term impact of the outage. 
D)  revenue lost during the outage. 
A)  cost of redundant systems and backups. 
B)  cost to recover from an outage. 
C)  overall long-term impact of the outage. 
D)  revenue lost during the outage.

Question 11

When defining a set of security controls to mitigate a risk, which of the following actions MUST occur?

Accepted Answer

A)  Each control's effectiveness must be evaluated individually 
B)  Each control must completely mitigate the risk 
C)  The control set must adequately mitigate the risk 
D)  The control set must evenly divide the risk 
A)  Each control's effectiveness must be evaluated individually 
B)  Each control must completely mitigate the risk 
C)  The control set must adequately mitigate the risk 
D)  The control set must evenly divide the risk

Question 12

Which of the following is true of Service Organization Control (SOC) reports?

Accepted Answer

A)  SOC 1 Type 2 reports assess the security, confidentiality, integrity, and availability of an organization's controls 
B)  SOC 2 Type 2 reports include information of interest to the service organization's management 
C)  SOC 2 Type 2 reports assess internal controls for financial reporting 
D)  SOC 3 Type 2 reports assess internal controls for financial reporting 
A)  SOC 1 Type 2 reports assess the security, confidentiality, integrity, and availability of an organization's controls 
B)  SOC 2 Type 2 reports include information of interest to the service organization's management 
C)  SOC 2 Type 2 reports assess internal controls for financial reporting 
D)  SOC 3 Type 2 reports assess internal controls for financial reporting

Question 13

Backup information that is critical to the organization is identified through a

Accepted Answer

A)  Vulnerability Assessment (V
A) . 
B)  Business Continuity Plan (BCP). 
C)  Business Impact Analysis (BI
A) . 
D)  data recovery analysis. 
A)  Vulnerability Assessment (V
A) . 
B)  Business Continuity Plan (BCP). 
C)  Business Impact Analysis (BI
A) . 
D)  data recovery analysis.

Question 14

Which of the following is the FIRST step in the incident response process?

Accepted Answer

A)  Determine the cause of the incident 
B)  Disconnect the system involved from the network 
C)  Isolate and contain the system involved 
D)  Investigate all symptoms to confirm the incident 
A)  Determine the cause of the incident 
B)  Disconnect the system involved from the network 
C)  Isolate and contain the system involved 
D)  Investigate all symptoms to confirm the incident

Question 15

Which of the following provides the BEST method to verify that security baseline configurations are maintained?

Accepted Answer

A)  Perform regular system security testing 
B)  Design security early in the development cycle 
C)  Analyze logs to determine user activities 
D)  Perform quarterly risk assessments 
A)  Perform regular system security testing 
B)  Design security early in the development cycle 
C)  Analyze logs to determine user activities 
D)  Perform quarterly risk assessments

Question 16

What is the motivation for use of the Online Certificate Status Protocol (OCSP)?

Accepted Answer

A)  To return information on multiple certificates 
B)  To control access to Certificate Revocation List (CRL) requests 
C)  To provide timely up-to-date responses to certificate queries 
D)  To issue X.509v3 certificates more quickly 
A)  To return information on multiple certificates 
B)  To control access to Certificate Revocation List (CRL) requests 
C)  To provide timely up-to-date responses to certificate queries 
D)  To issue X.509v3 certificates more quickly

Question 17

Which is the RECOMMENDED configuration mode for sensors for an Intrusion Prevention System (IPS) if the prevention capabilities will be used?

Accepted Answer

A)  Active 
B)  Inline 
C)  Passive 
D)  Span 
A)  Active 
B)  Inline 
C)  Passive 
D)  Span

Question 18

A continuous information security monitoring program can BEST reduce risk through which of the following?

Accepted Answer

A)  Collecting security events and correlating them to identify anomalies 
B)  Facilitating system-wide visibility into the activities of critical user accounts 
C)  Encompassing people, process, and technology 
D)  Logging both scheduled and unscheduled system changes 
A)  Collecting security events and correlating them to identify anomalies 
B)  Facilitating system-wide visibility into the activities of critical user accounts 
C)  Encompassing people, process, and technology 
D)  Logging both scheduled and unscheduled system changes

Question 19

The Structured Query Language (SQL) implements Discretionary Access Controls (DAC) using:

Accepted Answer

A)  INSERT and DELETE 
B)  GRANT and REVOKE 
C)  PUBLIC and PRIVATE 
D)  ROLLBACK and TERMINATE 
A)  INSERT and DELETE 
B)  GRANT and REVOKE 
C)  PUBLIC and PRIVATE 
D)  ROLLBACK and TERMINATE

Question 20

Physical Access Control Systems (PACS) allow authorized security personnel to manage and monitor access control for subjects through which function?

Accepted Answer

A)  Remote access administration 
B)  Personal Identity Verification (PIV) 
C)  Access Control List (ACL) 
D)  Privileged Identity Management (PIM) 
A)  Remote access administration 
B)  Personal Identity Verification (PIV) 
C)  Access Control List (ACL) 
D)  Privileged Identity Management (PIM)

What should be used immediately after a Business Continuity Plan (BCP) has been invoked?

The implementation of which features of an identity management system reduces costs and administration overhead while improving audit and accountability?

Why are packet filtering routers used in low-risk environments?

Which of the following processes is used to align security controls with business functions?

Which technique can be used to make an encryption scheme more resistant to a known plaintext attack?

Which of the following is the BEST defense against password guessing?

An organization plan on purchasing a custom software product developed by a small vendor to support its business model. Which unique consideration should be made part of the contractual agreement potential long-term risks associated with creating this dependency?

An external attacker has compromised an organization's network security perimeter and installed a sniffer onto an inside computer. Which of the following is the MOST effective layer of security the organization could have implemented to mitigate the attacker's ability to gain further information?

Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?

Determining outage costs caused by a disaster can BEST be measured by the

When defining a set of security controls to mitigate a risk, which of the following actions MUST occur?

Which of the following is true of Service Organization Control (SOC) reports?

Backup information that is critical to the organization is identified through a

Which of the following is the FIRST step in the incident response process?

Which of the following provides the BEST method to verify that security baseline configurations are maintained?

What is the motivation for use of the Online Certificate Status Protocol (OCSP)?

Which is the RECOMMENDED configuration mode for sensors for an Intrusion Prevention System (IPS) if the prevention capabilities will be used?

A continuous information security monitoring program can BEST reduce risk through which of the following?

The Structured Query Language (SQL) implements Discretionary Access Controls (DAC) using:

Physical Access Control Systems (PACS) allow authorized security personnel to manage and monitor access control for subjects through which function?

Certified Authorization Professional

Certified Cloud Security Professional (CCSP)

Filters

Exam 3: Certified Information Systems Security Professional

What should be used immediately after a Business Continuity Plan (BCP) has been invoked?

The implementation of which features of an identity management system reduces costs and administration overhead while improving audit and accountability?

Why are packet filtering routers used in low-risk environments?

Which of the following processes is used to align security controls with business functions?

Which technique can be used to make an encryption scheme more resistant to a known plaintext attack?

Which of the following is the BEST defense against password guessing?

An organization plan on purchasing a custom software product developed by a small vendor to support its business model. Which unique consideration should be made part of the contractual agreement potential long-term risks associated with creating this dependency?

An external attacker has compromised an organization's network security perimeter and installed a sniffer onto an inside computer. Which of the following is the MOST effective layer of security the organization could have implemented to mitigate the attacker's ability to gain further information?

Which of the following BEST describes the objectives of the Business Impact Analysis (BIA)?

Determining outage costs caused by a disaster can BEST be measured by the

When defining a set of security controls to mitigate a risk, which of the following actions MUST occur?

Which of the following is true of Service Organization Control (SOC) reports?

Backup information that is critical to the organization is identified through a

Which of the following is the FIRST step in the incident response process?

Which of the following provides the BEST method to verify that security baseline configurations are maintained?

What is the motivation for use of the Online Certificate Status Protocol (OCSP)?

Which is the RECOMMENDED configuration mode for sensors for an Intrusion Prevention System (IPS) if the prevention capabilities will be used?

A continuous information security monitoring program can BEST reduce risk through which of the following?

The Structured Query Language (SQL) implements Discretionary Access Controls (DAC) using:

Physical Access Control Systems (PACS) allow authorized security personnel to manage and monitor access control for subjects through which function?

Certified Authorization Professional

Certified Cloud Security Professional (CCSP)

Filters