[2024] CISSP Actual Exam Dumps, CISSP Practice Test
Actualtests4sure CISSP dumps & ISC Certification sure practice dumps
NEW QUESTION # 801
Which of the following is a fraud detection method whereby employees are moved from position to position?
- A. Mandatory Vacations
- B. Job Rotation
- C. Mandatory Rotation
- D. Mandatory Job Duties
Answer: B
Explanation:
Discussion: Job Rotation is the practice of moving employees from position to position in order to prevent any single user from perpetrating fraudulent activities without being detected by management. It is a common practice and can help an organization achieve certain corporate accreditation certifications.
The following answers are incorrect:
-
Mandatory Rotation: This isn't the right answer. There isn't a commonly-used term called mandatory rotation.
-
Mandatory Vacations: This isn't the right answer here but it is a good term with which to be familiar.
-
Mandatory Job Duties: This is an incorrect answer because it isn't a method to detect fraud by employees.
The following reference(s) was used to create this question: 2013. Official Security+ Curriculum.
NEW QUESTION # 802
In order to ensure the privacy and integrity of the data, connections between firewalls over public networks should use:
- A. Encryption
- B. Digital certificates
- C. An encrypted Virtual Private Network
- D. Screened subnets
Answer: C
Explanation:
Explanation/Reference:
Explanation:
A virtual private network (VPN) is a secure, private connection through an untrusted Network. It is a private connection because the encryption and tunneling protocols are used to ensure the confidentiality and integrity of the data in transit.
Incorrect Answers:
A: The main purpose of a screened subnet it to set up a demilitarized zone, not to protect connections over an insecure network.
B: A digital certificate provides identifying information. It is not used to protect connections over an insecure network.
D: Encryption can be used to protect connections over an insecure network, but it cannot protect the integrity.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 701
NEW QUESTION # 803
Emergency actions are taken at the incipient stage of a disaster with the objectives of preventing injuries or loss of life and of:
- A. protecting evidence
- B. determining the extent of property damage
- C. preventing looting and further damage
- D. mitigating the damage to avoid the need for recovery
Answer: D
NEW QUESTION # 804
RAID Level 1 mirrors the data from one disk to set of disks using which of the following techniques?
- A. Copying the data onto another disk or set of disks.
- B. Moving the data onto another disk or set of disks.
- C. Establishing dual addressing to another disk or set of disks.
- D. Establishing dual connectivity to another disk or set of disks.
Answer: A
Explanation:
Explanation: RAID 1 or Mirroring is a technique in which data is written to two duplicate disks simultaneously through a copy process. This way if one of the disk drives fails, the system can instantly switch to the other disk without any loss of data or service. Disk mirroring is used commonly in on-line database systems where it's critical that the data be accessible at all times. RAID means "Redundant Array of Inexpensive Disks".
NEW QUESTION # 805
Which of the following is a common measure within a Local Area Network (LAN) to provide additional security through segmentation?
- A. Building Demilitarized Zones (DMZ)
- B. Building Virtual Local Area Networks (VLAN)
- C. Implementing an Intrusion Detection System (IDS)
- D. Implementing a virus scanner
Answer: B
NEW QUESTION # 806
During which of the following processes is least privilege implemented for a user account?
- A. Provision
- B. Approve
- C. Review
- D. Request
Answer: A
NEW QUESTION # 807
Data inference violations can be reduced using
- A. Correct-state transformation.
- B. Rules based meditation.
- C. Polyinstantiation technique.
- D. Multi-level data classification.
Answer: C
Explanation:
"Polyinstantiation is the development of a detailed version of an object from another object using different values in the new object. In the database information security, this term is concerned with the same primary key for different relations at different classification levels being stored in the same database. For example, in a relational database, the same of a military unit may be classified Secret in the database and may have an identification number as the primary key. If another user at a lower classification level attempts to create a confidential entry for another military unit using the same identification number as a primary key, a rejection of this attempt would imply to the lower level user that the same identification number existed at a higher level of classification. To avoid this inference channel of information, the lower level user would be issued the same identification number for their unit and the database management system would manage this situation where the same primary key was used for different units." Pg 352-353 Krutz: The CISSP Prep Guide: Gold Edition.
"As with aggregation, the best defense against inference attacks is to maintain constant vigilance over the permissions granted to individual users. Furthermore, intentional blurring of data may be used to prevent the inference of sensitive information." - Ed Tittle CISSP Study Guide (sybex) The other security issue is inference, which is very similar to aggregation. The inference problem happens when a subject deduces information that is restricted from data he has access to. This is seen when data at a lower security level indirectly portrays data at a higher level...This problem is usually dealt with in the development of the database by implementing content and context-dependent classification rules; this tracks the subject's query requests and restricts patterns that represent inference. "Polyinstantiation is a process of interactively producing more detailed versions of objects by populating variables with values or other variables"- Shon Harris All-in-one CISSP Certification Guide pg 725-727
Topic 2, Security Architecture and Models
NEW QUESTION # 808
Which of the following is typically NOT a consideration in the design of
passwords?
- A. Electronic monitoring
- B. Authentication period
- C. Composition
- D. Lifetime
Answer: A
Explanation:
Electronic monitoring is the eavesdropping on passwords that are being transmitted to the authenticating device. This issue is a technical one and is not a consideration in designing passwords. The other answers relate to very important password characteristics that must be taken into account when developing passwords. Password lifetime, in answer a, refers to the maximum period of time that a password is valid. Ideally, a password should be used only once. This approach can be implemented by token password generators and challenge response schemes. However, as a practical matter, passwords on most PC's and workstations are used repeatedly. The time period after which passwords should be changed is a function of the level of protection required for the information being accessed. In typical organizations, passwords may be changed every three to six months. Obviously, passwords should be changed when employees leave an organization or in a situation where a password may have been compromised.
Answer "the composition of a password" defines the characters that can be used in the password. The characters may be letters, numbers, or special symbols.
" The authentication period" defines the maximum acceptable period between the initial authentication of a user and any subsequent reauthorization process. For example, users may be asked to authenticate themselves again after a specified period of time of being logged on to a server containing critical information.
Topic 14, Exam SET B
NEW QUESTION # 809
A database View operation implements the principle of:
- A. Separation of duties.
- B. Least privilege.
- C. Entity integrity.
- D. Referential integrity.
Answer: B
Explanation:
The correct answer is "Least privilege". Least privilege, in the database context,
requires that subjects be granted the most restricted set of access privileges
to the data in the database that are consistent with the performance
of their tasks.
Separation of duties, assigns parts of security-sensitive tasks to several individuals.
Entity integrity requires that each row in the relation table must have a
non-NULL attribute. Relational integrity, answer d, refers to the
requirement that for any foreign key attribute, the referenced relation
must have the same value for its primary key.
NEW QUESTION # 810
Multi-Factor Authentication (MFA) is necessary in many systems given common types of password attacks. Which of the following is a correct list of password attacks?
- A. Brute force, dictionary, phishing, keylogger
- B. Zeus, netbus, rabbit, turtle
- C. Token, biometrics, IDS, DLP
- D. Masquerading, salami, malware, polymorphism
Answer: A
NEW QUESTION # 811
A company wants to store data related to users on an offsite server. What method can be deployed to protect the privacy of the user's information while maintaining the field-level configuration of the database?
- A. Encryption
- B. Hashing
- C. Tokenization
- D. Encoding
Answer: A
NEW QUESTION # 812
When deploying en Intrusion Detection System (IDS) on a high-volume network, the need to distribute the load across multiple sensors would create which technical problem?
- A. Synchronized sensor updates
- B. Session continuity
- C. Proxy authentication failure
- D. Sensor overload
Answer: B
NEW QUESTION # 813
Including a Trusted Platform Module (TPM) in the design of a computer system is an example of a technique to what?
- A. Improve the quality of security software
- B. Interface with the Public Key Infrastructure (PKI)
- C. Prevent Denial of Service (DoS) attacks
- D. Establish a secure initial state
Answer: D
NEW QUESTION # 814
Which of the following is not considered firewall technology?
- A. Screened host
- B. Dual homed host
- C. Screened subnet
- D. Duel gateway host
Answer: D
Explanation:
Duel gateway host is not considered firewall technology.
NEW QUESTION # 815
Which conceptual approach to intrusion detection system is the most common?
- A. Behavior-based intrusion detection
- B. Knowledge-based intrusion detection
- C. Host-based intrusion detection
- D. Statistical anomaly-based intrusion detection
Answer: B
Explanation:
There are two conceptual approaches to intrusion detection. Knowledge-based intrusion detection uses a database of known vulnerabilities to look for current attempts to exploit them on a system and trigger an alarm if an attempt is found. The other approach, not as common, is called behaviour-based or statistical analysis-based. A host-based intrusion detection system is a common implementation of intrusion detection, not a conceptual approach. Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page 63). Also: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 4: Access Control (pages 193-194).
NEW QUESTION # 816
What is the MOST important purpose of testing the Disaster Recovery Plan (DRP)?
- A. Validating the effectiveness of the plan
- B. Identifying the benchmark required for restoration
- C. Evaluating the efficiency of the plan
- D. Determining the Recovery Time Objective (RTO)
Answer: A
NEW QUESTION # 817
......
CISSP Actual Questions and Braindumps: https://www.actualtests4sure.com/CISSP-test-questions.html
Pass CISSP Exam with Updated CISSP Exam Dumps PDF 2024: https://drive.google.com/open?id=1bOEUhnLRKy-Rd4OuXzG4M_u7l9xpg8lU
