CISSP CISSP 4

Question 1

Which type of malware disguises itself as legitimate software but performs malicious actions when executed?

Accepted Answer

Trojan horse

Answer

A Trojan horse masquerades as benign or useful software while secretly performing malicious functions when executed by the user.

Question 2

In the context of risk management, what does 'residual risk' mean?

Accepted Answer

The risk that remains after controls have been implemented

Answer

Residual risk is the remaining risk exposure after security controls have been applied to mitigate the inherent risk.

Question 3

An attacker sends a fraudulent email appearing to come from the CEO requesting an urgent wire transfer. This is BEST classified as:

Accepted Answer

Whaling

Answer

Whaling is a phishing attack that specifically targets high-profile individuals like executives, often impersonating them for financial fraud.

Question 4

Which network security device operates at Layer 7 and can inspect application-layer content for threats?

Accepted Answer

Next-generation firewall (NGFW)

Answer

Next-generation firewalls operate at Layer 7 (application layer) and can perform deep packet inspection, application identification, and intrusion prevention.

Question 5

What is the purpose of a 'chain of custody' in digital forensics?

Accepted Answer

Documenting the handling and transfer of evidence to maintain its integrity

Answer

Chain of custody documents every person who handled evidence and all actions taken, proving the evidence has not been tampered with.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP CISSP 4