ISC2 Book Questions

Lakshmi presents a user ID and a password to a system to log on. Which characteristic must the user ID have?

What is a security solution that detects, identifies, and often quarantines potentially hostile software?

Which of these combinations of physical security controls share a single point of failure?

Vulnerability is a weakness in within a system that can be exploited by a threat source.

This can be used to map dataflows through an organization, as well as the relevant security controls used at each point

Threat is an individual or a group that attempts to exploit vulnerabilities to cause or force a threat to occur

What is a common network device used to filter traffic ?

A mode of encryption for efficiently ensuring confidentiality, with a minimum amount of processing overhead, is called?

The practice of ensuring that an organizational process cannot be completed by a single person

Which department is responsible for publishing and signing the organizations polices?

What is an example of a physical control?

A set of security controls or system settings used to ensure uniformity of configuration through the IT environment is ?

A CISO at a large organization documented a policy that establishes the acceptable use of cloud enviornments for staff

An organizations business continuity effort is a way to ensure which critical functions are maintained during disaster?

A user tried to log in to the network several times using the correct credentials with no success. This is an example of

Which of the following is likely to be used in a disaster recovery effort?

Creating a document that describes step-by-step how to securely install and (OS) on a new lap top. This document is a

What is a visual cue that lets anyone in contact with data know what the classification is?

Which of the following would be considered a Technical Control?

which of the following is often associated with disaster recovery planning?

The concept of "secrecy" is most related to which foundational aspect of security?

Which of the following is a subject?

Cloud services arrangement where the provider owns/manages the hardware, OS, and apps in the cloud & customer owns data

An external entity has tried to gain access to your organizations IT environment without proper authorization. This is

What is the most important aspect of security awareness/training?

Who is responsible for creating the organizations business continuity plan?

Why is an asset inventory so important?

Which physical deterrent control could be used to dissuade unauthorized people from entering the organizations property?

Endpoint <----> Webserver, which port number is associated with protocol typically used in this connection?

Which organizational policy describes the type of smartphones that can be used to connect to the internal IT environment

Lakshmi presents a user ID and a password to a system to log on. Which characteristic must the user password have?

What is a portion of an organizations network that interfaces directly with the outside world?

Which of these activities is often associated with disaster recovery efforts?

What is Nonrepudiation?

An attack against the availability of a network/system that typically uses many attacking machines to direct traffic

Which of the following is always true about logging?

Which physical control can be used to reduce the risk of unbadged people following badged workers inside the facility.

What is the common term used to describe the mechanisms that control the temperature and humidity in the data center?

An asset is something that is NOT of value to an organization

Your team determines that the vulnerability exploited is not widely known and there aren't any current listings....

What is a common network device used to connect networks?

Which entity is most likely to be tasked with monitoring and enforcing security policy?

Which of the following is not one of the four typical ways of managing risk?

Which of the following tools can be used to grant remote users access to the internal IT environment?

Derrick logs on to a system to read a file. In this example, derrick is what?

What is meant by disaster recovery?

If one person must leave for any reason, the other must step out too until they can both re-enter. This is called

A user tried to log in using the correct credentials with no success. You see that account is compromised. this is

The right or permission that is granted to a system entity to access a system resource

A security solution installed on an endpoint to detect potentially anomalous activity is called what?

What is the correct sequence of the elements in governance, starting from the highest level?