stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CISSP Mock Test Flashcards | StudBud
Explore
/
CISSP Mock Test
CISSP Mock Test
51 terms
·
StudBud Administration
·
163 plays
Imported from external platform
Flashcards
51 cards
F
Practice quiz
P
Host live
L
Questions
51
Answers
1
Please read the question carefully and answer!!!
The facility code
The security level
The log priority
The severity level
2
Please read the question carefully and answer!!!
Nonrepudiation; digital signatures
Integrity; IMAP
Authentication; DKIM
Repudiation; encryption
3
Please read the question carefully and answer!!!
Pulverize
Zero wipe
Degauss
Secure erase
4
What OASIS standard markup language is used to generate provisioning requests both within & Outside of organizations?
SOA
SPML
SAML
XACML
5
What is the default subnet mask for a Class B network?
255.255.255.0
255.254.0.0
255.255.0.0
255.0.0.0
6
What RADIUS alternative is commonly used for Cisco network gear and supports two factor authentication?
Kerberos
TACACS+
XTACACS
RADIUS+
7
Please read the question carefully and answer!!!
Packets with a source address outside Angie’s address block
Packets with a source address from Angie’s private address block
Packets with a destination address from Angie’s public IP address block
Packets with a source address from Angie’s public IP address block
8
Please read the question carefully and answer!!!
Use device fingerprinting via a web-based registration system.
Record the MAC address of each system.
Require users to fill out a form to register each system.
Scan each system using a port scanner.
9
This firewall uses multiple proxy servers that filter traffic based on analysis of the protocols used for each services.
A circuit-level gateway firewall
A stateful inspection firewall
An application-level gateway firewall
A static packet filtering firewall
10
In the OSI model, when a packet changes from a datastream to a segment or a datagram, what layer has it traversed?
The Transport layer
The Application layer
The Physical layer
The Data Link layer
11
Which one of the following activities transforms a zero-day vulnerability into a less dangerous attack vector?
Release of a security patch
Reconfiguration of a firewall
Discovery of the vulnerability
Implementation of transport-layer encryption
12
Please read the question carefully and answer!!!
Files contained on the remote server
Ricky
VPN
Remote file server
13
Please read the question carefully and answer!!!
Whitelist
Heuristic
Antivirus
Blacklist
14
Please read the question carefully and answer!!!
Wiretap Act
Computer Fraud and Abuse Act
Digital Millennium Copyright Act
Copyright Code
15
Which accounts are typically assessed during an account management assessment?
Highly privileged accounts
A random sample
Accounts that have existed for long periods of time
Recently generated accounts
16
Please read the question carefully and answer!!!
Crystal box
Gray box
Zero box
Black box
17
Bell-LaPadula is an example of what type of access control model?
DAC
RBAC
MAC
ABAC
18
Which one of the following tools may be used to achieve the goal of nonrepudiation?
Firewall
Digital signature
IDS
Symmetric encryption
19
Application banner information is typically recorded during what penetration testing phase?
Reporting
Attack
Discovery
Planning
20
Please read the question carefully and answer!!!
3DES
Skipjack
IDEA
RSA
21
Please read the question carefully and answer!!!
A stop-loss order
An NDA
An AUP
Encryption
22
Please read the question carefully and answer!!!
Separation of duties
Clearance
Need to know
Isolation
23
Please read the question carefully and answer!!!
BGP is not set up properly.
They have not registered their IP with their ISP.
92.168.1.25 is a reserved address for home routers.
The IP address is a private, nonroutable address.
24
Please read the question carefully and answer!!!
IPsec
SDN
IPX
PAT
25
Please read the question carefully and answer!!!
/etc/secure
/etc/hash
/etc/shadow
/etc/passwd
26
What type of error occurs when a valid subject using a biometric authenticator is not authenticated?
A Type 4 error
A Type 1 error
A Type 3 error
A Type 2 error
27
What two types of attacks are VoIP call managers and VoIP phones most likely to be susceptible to?
Worms and Trojans
DoS and malware
DoS and host OS attacks
Host OS attacks and buffer overflows
28
Please read the question carefully and answer!!!
Best evidence rule
Hearsay rule
Testimonial evidence rule
Parol evidence rule
29
8. What type of inbound packet is characteristic of a ping flood attack?
ICMP echo request
ICMP route changed
ICMP destination unreachable
ICMP echo reply
30
What is the final stage of the Software Capability Maturity Model (SW-CMM)?
Optimizing
Managed
Repeatable
Defined
31
Based on same previous Scenario, what is the annualised rate of occurrence for a flood at DataTech’s data centre?
0.05
0.002
0.005
0.02
32
Please read the question carefully and answer!!!
SOC 3
SOC 2
None of the SOC reports are suited to this
SOC 1
33
Please read the question carefully and answer!!!
15
6
30
12
34
Please read the question carefully and answer!!!
Replay
Real-time
Passive
Active
35
Please read the question carefully and answer!!!
Multithreading
Multiprocessing
Multitasking
Multiprogramming
36
What class of fire extinguisher is capable of fighting electrical fires?
Class A
Class C
Class B
Class D
37
Please read the question carefully and answer!!!
A switch
A Router
A gateway
A Bridge
38
Please read the question carefully and answer!!!
Tailoring
Standardizing
Scoping
Baselining
39
Please read the question carefully and answer!!!
Confidential
Top Secret
Mixed classification
Secret
40
Which of the following is not a valid use for key risk indicators?
Provide warnings before issues occur.
Provide insight into risk tolerance for the organization.
Provide real-time incident response information.
Provide historical views of past risks.
41
Which one of the following techniques can an attacker use to exploit a TOC/TOU vulnerability?
Exception handling
Concurrency control
File locking
Algorithmic complexity
42
Based on the info in below scenario, what is the exposure factor for the effect of a flood on DataTech’s data center?
200%
100%
2%
20%
43
Please read the question carefully and answer!!!
Least privilege
Separation of duties
Job rotation
Two-person control
44
Please read the question carefully and answer!!!
More complex passwords
Multifactor authentication
User education against social engineering
Addition of security questions based on personal knowledge
45
Please read the question carefully and answer!!!
Access controls
Firewalls
Integrity verification
Encryption
46
Please read the question carefully and answer!!!
RPO
MTD
RTO
SLA
47
Please read the question carefully and answer!!!
Data owner
CISO
Data custodian
Data creator
48
Based on same previous Scenario, what is the annualized loss expectancy for a flood at DataTech’s data center?
$100,000
$1,000,000
$400,000
$40,000
49
What three types of interfaces are typically tested during software testing?
Network interfaces, APIs, and UIs
Application, programmatic, and user interfaces
APIs, UIs, and physical interfaces
Network, physical, and application interfaces
50
A Type 2 authentication factor that generates dynamic passwords based on a time- or algorithm-based system is called...
A token
A smart card
A CAC
A PIV
51
Which one of the following is not a principle of the Agile approach to software development?
Simplicity is essential.
Working software is the primary measure of progress.
Businesspeople and developers must work together daily.
The most efficient method of conveying information is electronic.
