CISSP Lesson 10 PreTest

Question 2

How often should monitoring be implemented?
A) Monthly
B) Quarterly
C) Perpetually

Answer 2

Perpetually

Question 3

Which is the best countermeasure against loss of physical and infrastructure support?
A) Have a current disaster recovery plan
B) Have multiple backup generators
C) Have multiple physical controls

Answer 3

Have a current disaster recovery plan

Question 4

What is the purpose of separation of duties?
A) Ensures that individuals are not able to perform more tasks than their security clearance allows
B) Ensures that any critical task cannot be completely executed by a single individual

Answer 4

Ensures that any critical task cannot be completely executed by a single individual

Question 5

All audit reports should include the scope of the audit.
A) TRUE
B) FALSE

Answer 5

TRUE

Question 6

Erasing files from a disk does not actually remove all of the data.
A) TRUE
B) FALSE

Answer 6

TRUE

Question 7

Which types of records should be retained by a company to support data security? Choose all that apply.
A) Employee records
B) Event logs
C) Audit trails
D) Software registration documentation
E) Backups of critical information

Answer 7

Event logs
Audit trails
Backups of critical information

Question 8

Due care is the upkeep of due diligence.
A) TRUE
B) FALSE

Answer 8

FALSE

Question 9

Which type of monitoring tools allows for a quick view of a specific metric?
A) Ad hoc
B) Real-time
C) Passive

Answer 9

Ad hoc

Question 10

Which statement is true regarding audit reports?
A) An audit report should contain as much data as possible
B) An audit report should contain as little data as possible
C) An audit report should contain only meaningful data

Answer 10

An audit report should contain only meaningful data

Question 11

Which process is often used to declassify data?
A) Purging
B) Degaussing
C) Sanitation

Answer 11

Purging

Question 12

Which type of IDS contains a database of recognized attacks?
A) Host-based
B) Signature-based
C) Behavior-based

Answer 12

Signature-based

Question 13

Which is the best countermeasure against sniffing attacks?
A) Access controls
B) Physical controls
C) Encryption

Answer 13

Encryption

Question 14

Which tools are used to scan for vulnerabilities? Choose all that apply.
A) WebSpy
B) Nessus
C) Nmap
D) WebInspect
E) NeoTrace

Answer 14

Nessus
Nmap
WebInspect

Question 15

Which steps should be taken to protect source code? Choose all that apply.
A) Archive current code
B) Maintain version change history
C) Keep patches current
D) Apply access controls

Answer 15

Archive current code

Maintain version change history

Question 16

Which events should be monitored? Choose all that apply.
A) Access to removable storage
B) Login failures
C) Logins and logouts
D) Database session start and end

Answer 16

Access to removable storage
Login failures
Logins and logouts
Database session start and end