Question 1

Which of the following is a PRIMARY benefit of using a formalized security testing report format and structure?

Accepted Answer

A)  Executive audiences will understand the outcomes of testing and most appropriate next steps for corrective actions to be taken 
B)  Technical teams will understand the testing objectives, testing strategies applied, and business risk associated with each vulnerability 
C)  Management teams will understand the testing objectives and reputational risk to the organization 
D)  Technical and management teams will better understand the testing objectives, results of each test phase, and potential impact levels

Question 2

An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?

Accepted Answer

A)  Development, testing, and deployment 
B)  Prevention, detection, and remediation 
C)  People, technology, and operations 
D)  Certification, accreditation, and monitoring

Question 3

Which of the following is MOST important when determining appropriate countermeasures for an identified risk?

Accepted Answer

A)  Interaction with existing controls 
B)  Organizational risk tolerance 
C)  Patch availability 
D)  Cost

Question 4

Which of the following is the MAIN reason for using configuration management?

Accepted Answer

A)  To provide centralized administration 
B)  To reduce the number of changes 
C)  To reduce errors during upgrades 
D)  To provide consistency in security controls

Question 5

Which of the following is the BEST type of authentication and encryption for a Secure Shell (SSH) implementation when network traffic traverses between a host and an infrastructure device?

Accepted Answer

A)  Lightweight Directory Access Protocol (LDAP) 
B)  Public-key cryptography 
C)  Remote Authentication Dial-In User Service (RADIUS) 
D)  Private-key cryptography

Question 6

What is the MOST important element when considering the effectiveness of a training program for Business Continuity (BC) and Disaster Recovery (DR)?

Accepted Answer

A)  Management support 
B)  Consideration of organizational need 
C)  Technology used for delivery 
D)  Target audience

Question 7

Which factors MUST be considered when classifying information and supporting assets for risk management, legal discovery, and compliance?

Accepted Answer

A)  System owner roles and responsibilities, data handling standards, storage and secure development lifecycle requirements 
B)  Data stewardship roles, data handling and storage standards, data lifecycle requirements 
C)  Compliance office roles and responsibilities, classified material handling standards, storage system lifecycle requirements 
D)  System authorization roles and responsibilities, cloud computing standards, lifecycle requirements

Question 8

Which technology is a prerequisite for populating the cloud-based directory in a federated identity solution?

Accepted Answer

A)  Notification tool 
B)  Message queuing tool 
C)  Security token tool 
D)  Synchronization tool

Question 9

Which of the following is the PRIMARY reason a sniffer operating on a network is collecting packets only from its own host?

Accepted Answer

A)  An Intrusion Detection System (IDS) has dropped the packets. 
B)  The network is connected using switches. 
C)  The network is connected using hubs. 
D)  The network's firewall does not allow sniffing.

Question 10

Due to system constraints, a group of system administrators must share a high-level access set of credentials. Which of the following would be MOST appropriate to implement?

Accepted Answer

A)  Increased console lockout times for failed logon attempts 
B)  Reduce the group in size 
C)  A credential check-out process for a per-use basis 
D)  Full logging on affected systems

Question 11

From a security perspective, which of the following assumptions MUST be made about input to an application?

Accepted Answer

A)  It is tested 
B)  It is logged 
C)  It is verified 
D)  It is untrusted

Question 12

What does electronic vaulting accomplish?

Accepted Answer

A)  It protects critical files. 
B)  It ensures the fault tolerance of Redundant Array of Independent Disks (RAI
D)  systems 
C)  It stripes all database records 
D)  It automates the Disaster Recovery Process (DRP)

Question 13

In the Software Development Life Cycle (SDLC), maintaining accurate hardware and software inventories is a critical part of

Accepted Answer

A)  systems integration. 
B)  risk management. 
C)  quality assurance. 
D)  change management.

Question 14

How should the retention period for an organization's social media content be defined?

Accepted Answer

A)  By the retention policies of each social media service 
B)  By the records retention policy of the organization 
C)  By the Chief Information Officer (CIO) 
D)  By the amount of available storage space

Question 15

An organization has outsourced its financial transaction processing to a Cloud Service Provider (CSP) who will provide them with Software as a Service (SaaS). If there was a data breach who is responsible for monetary losses?

Accepted Answer

A)  The Data Protection Authority (DP
A)  
B)  The Cloud Service Provider (CSP) 
C)  The application developers 
D)  The data owner

Question 16

The personal laptop of an organization executive is stolen from the office, complete with personnel and project records. Which of the following should be done FIRST to mitigate future occurrences?

Accepted Answer

A)  Encrypt disks on personal laptops 
B)  Issue cable locks for use on personal laptops 
C)  Create policies addressing critical information on personal laptops 
D)  Monitor personal laptops for critical information

Question 17

Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

Accepted Answer

A)  Examine the device for physical tampering 
B)  Implement more stringent baseline configurations 
C)  Purge or re-image the hard disk drive 
D)  Change access codes

Question 18

What is the MOST significant benefit of an application upgrade that replaces randomly generated session keys with certificate based encryption for communications with backend servers?

Accepted Answer

A)  Non-repudiation 
B)  Efficiency 
C)  Confidentially 
D)  Privacy

Question 19

What is the foundation of cryptographic functions?

Accepted Answer

A)  Cipher 
B)  Encryption 
C)  Hash 
D)  Entropy

Question 20

What is the purpose of an Internet Protocol (IP) spoofing attack?

Accepted Answer

A)  To send excessive amounts of data to a process, making it unpredictable 
B)  To intercept network traffic without authorization 
C)  To disguise the destination address from a target's IP filtering devices 
D)  To convince a system that it is communicating with a known entity

Exam 3: Certified Information Systems Security Professional