CISSP 2018 - 8 Domain - Best questions

Question 1

Testing individual components

Accepted Answer

Unit

Question 2

Application sec overview, overview and concepts, organization normative framework, app sec management process, case stud

Accepted Answer

27034

Question 3

Reviewing code after execution

Accepted Answer

Dynamic Analysis

Question 4

Which is an attack technique that is used in an attempt to bypass a web app´s existing directory traversal Sec check?

Accepted Answer

double encoding

Question 5

Which of the following OOP concepts enables two objects that are based on the same class to process data independently?

Accepted Answer

Polyinstalation

Question 6

OOP concept that enable data tobe processd differently based onthedata type whenobjectsare instantiated from otherobject

Accepted Answer

Polymorphism

Question 7

Which of the following is a sec dev metric that attempts to determine the average number of defects per LoC?

Accepted Answer

Defect Density

Question 8

Ensuring code meets customer requirements

Accepted Answer

Acceptance

Question 9

Buffer overflow protection mechanism that places executables into random memory addresses at boot time.

Accepted Answer

Address Space Layout Randomization (ASLR)

Question 10

Which statement is not a step of the Configuration Management

Accepted Answer

Schedule and Implement

Question 11

Whitch vulnerability is MOST likely a false positive?

Accepted Answer

Anonymous FTP access

Question 12

Which of the following terms is another name for a column in a relational Database?

Accepted Answer

Attribute

Question 13

Buffer overflow protection mechanism that Microsoft recommends

Accepted Answer

Pointer Encoding

Question 14

Reviewing programming code

Accepted Answer

Static Analysis

Question 15

Which of the following terms is another name for a row in a relational Database?

Accepted Answer

Tuple

Question 16

To mitigate the reuse of info that is stored in memory when a user quits the application

Accepted Answer

Data Validation

Question 17

Change management is used to:

Accepted Answer

Manage the lifecycle of a software system.

Question 18

Which is an sec app dev technique that is intended to prevent attacks?

Accepted Answer

Input Validation

Question 19

Which vulnerability task involves the enumeration of all Sec risks within a system?

Accepted Answer

Vulnerabiity scanning

Question 20

Which is an attack technique used when an attacker is searching for unlinkd content on a web server?

Accepted Answer

Forced Browsing

Question 21

Risk Management is used to:

Accepted Answer

Analyze and identify the risks a business faces.

Question 22

Which is an attack technique that is used in an attempt to bypass a web application´s existing traversal Sec check?

Accepted Answer

Double Encoding

Question 23

Combining an individual's street address with info from an auto's trip odometer to reduce that individual's workplace

Accepted Answer

Aggregation

Question 24

Which of the following scenarios BEST describes avoiding risk?

Accepted Answer

Cancelling the implementation of a new credit card payment system.

Question 25

Which of the following terms is another name for a column in a relational Database?

Accepted Answer

Attribute

Question 26

Is the act of sending random data

Accepted Answer

Fuzzing

Question 27

Data normalization process of removing data in a table that is not dependent on the primary key from that table.

Accepted Answer

Third Normal Form (3NF)

Question 28

Testing after changes take place

Accepted Answer

Regression

Question 29

Multidisciplinary dev team with representatives from many or all the stakeholder populations

Accepted Answer

Integrated Product Team (IPT)

Question 30

OOP concept that prevents accidental data access by ensuring that a class defines only the data that it requires.

Accepted Answer

Encapsulation

Question 31

Verifying components work together in the production components

Accepted Answer

Integration

Question 32

OOP concept that ensures that a subclass based on an OOP class receives the characteristics of that super class.

Accepted Answer

Inheritance

Question 33

Which of the following steps in the change management process is MOST likely o interface with config management process?

Accepted Answer

Documentetion

Question 34

Deducing a patient's illness based on info about that patient's prescription

Accepted Answer

Aggregation

Question 35

Which of the following is a secure dev metric that ranks sec issues in order to quantify risk?

Accepted Answer

Risk Dnsity

Question 36

User management is used to:

Accepted Answer

Manage the level of access users have to a software system.

Question 37

Buffer overflow protection mechanism that forces an application to fail immediately if a pointer is freed incorrectly.

Accepted Answer

Heap Metadata Protection

Question 38

Buffer overflow protection mechanism that prevents executable code from executing within data pages

Accepted Answer

Data Execution Prevention (DEP)

Question 39

Which of the following BEST illustrates a proactive defense measure?

Accepted Answer

Disabling unnecessary services on a server.

Question 40

Which of the following is a nondiscretionary data access control?

Accepted Answer

Role-based Access Control (RBAC)

Question 41

Disaster Recovery Planning(DRP) is used to:

Accepted Answer

Identify and reduce the effect of disaster on software.

Question 42

Which of the following is not a reactive defense measure?

Accepted Answer

Disabling unnecessary services on a server.

CISSP 2018 - 8 Domain - Best questions

Questions 42

CISSP 2018 - 8 Domain - Best questions

Questions 42