CISSP Practice Test

Question 1

Which statement is most accurate if one of your responsibilities is to manually monitor audit logs to detect suspicious activity,
 as stated in your job description?

Accepted Answer

The mechanism that creates audit logs is a technical control that supplements manual processes

Answer

The mechanism that creates audit logs is a technical control, as it's a system or software component designed to perform a security function. While audit logs themselves are a detective control, the act of manually monitoring them is a procedural control. Therefore, the technical control (log creation) provides the necessary data that supplements and enables the manual review process.

Question 2

To authenticate the company's public users, your CIO wishes to employ Lightweight Directory Access Protocol (LDAP). 
The following should be your initial consideration:

Accepted Answer

Whether the considered version of LDAP has sufficient support for transport layer security

Answer

When using LDAP for authenticating public users, the primary concern should be the security of the credentials and data transmitted. LDAP itself is not inherently secure, so ensuring that the version considered has sufficient support for Transport Layer Security (TLS) or Secure Sockets Layer (SSL) is critical. This encryption protects the authentication process from eavesdropping and man-in-the-middle attacks, safeguarding user information.

Question 3

Configuration management is most likely handled during which phase (s) of the asset lifecycle?

Accepted Answer

Secure

Answer

Configuration management is the systematic process of managing changes to a system's configuration to maintain its integrity, security, and performance. While it impacts all phases, it is most critically handled during the 'Secure' phase of the asset lifecycle. This is where controls are implemented, maintained, and updated to protect the asset from unauthorized access, use, disclosure, disruption, modification, or destruction, ensuring its ongoing security posture.

Question 4

To acquire access to a database and begin his work as an administrator, Jeffrey utilizes a secret code. He must also offer a
 thumbprint, a retina scan, and the system checks the position of his terminal's authentication. What is most likely
 being described?

Accepted Answer

Since there are four items required and three categories provided, this is a form of multi-factor authentication

Answer

Multi-factor authentication (MFA) requires a user to provide two or more distinct authentication factors from different categories. Jeffrey uses 'something he knows' (secret code), 'something he is' (thumbprint, retina scan - biometrics), and 'where he is' (terminal's position). Since these factors belong to different categories, this scenario clearly describes multi-factor authentication, enhancing security beyond a single factor.

Question 5

Both the principal and mirror sites of Astrotek Company have recently gone down due to an unplanned outage. The outage 
will last at least three weeks, according to officials. What is the first category of items you should check for while reviewing
 the contingency plan?

Accepted Answer

Recovery steps to the alternate site within the recovery time objective

Answer

With both the principal and mirror sites down for an extended period, the company must activate its disaster recovery plan to an alternate site. The first category of items to check in the contingency plan would be the recovery steps to this alternate site. It is crucial to ensure these steps can be completed within the defined Recovery Time Objective (RTO), which dictates the maximum acceptable downtime for the business.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Practice Test