Proper study guides for Renewal ISC2 Certified Information Systems Security Professional (CISSP) certified begins with ISC2 CISSP preparation products which designed to deliver the Real CISSP questions by making you pass the CISSP test at your first time. Try the free CISSP demo right now.

2021 Dec CISSP exam prep

Q141. What is the GREATEST.challenge of.an agent-based patch management solution? 

A. Time to gather vulnerability information about the computers in the program 

B. Requires that software be installed, running, and managed on all participating computers 

C. The significant amount of network bandwidth while scanning computers 

D. The consistency of distributing patches to each participating computer 

Answer: B 


Q142. Retaining system logs for six months or longer can be valuable for what activities?.

A. Disaster recovery and business continuity 

B. Forensics and incident response 

C. Identity and authorization management 

D. Physical and logical access control 

Answer: B 


Q143. Logical access control programs are MOST effective when they are 

A. approved by external auditors. 

B. combined with security token technology. 

C. maintained by computer security officers. 

D. made part of the operating system. 

Answer: D 


Q144. In a basic SYN flood attack, what is the attacker attempting to achieve? 

A. Exceed the threshold limit of the connection queue for a given service 

B. Set the threshold to zero for a given service 

C. Cause the buffer to overflow, allowing root access 

D. Flush the register stack, allowing hijacking of the root account 

Answer: A 


Q145. Application of which of the following Institute of Electrical and Electronics Engineers (IEEE) standards will prevent an unauthorized wireless device from being attached to a network? 

A. IEEE 802.1F 

B. IEEE 802.1H 

C. IEEE 802.1Q 

D. IEEE 802.1X 

Answer: D 


Latest CISSP free draindumps:

Q146. Refer.to the information below to answer the question. 

In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files. 

In a Bell-LaPadula system, which user cannot write to File 3? 

A. User A 

B. User B 

C. User C 

D. User D 

Answer: D 


Q147. Refer.to the information below to answer the question. 

In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files. 

Which of the following is true according to the star property (*property)? 

A. User D can write to.File 1 

B. User.B can write to File 1 

C. User A can write to File 1 

D. User C can.write to.File 1 

Answer: C 


Q148. A thorough review of an organization's audit logs finds that a disgruntled network administrator has intercepted emails meant for the.Chief.Executive Officer.(CEO).and changed them before forwarding them to their intended recipient. What type of attack has MOST likely occurred? 

A. Spoofing 

B. Eavesdropping 

C. Man-in-the-middle 

D. Denial of service 

Answer: C 


Q149. A health care provider is considering Internet access for their employees and patients. Which of the following is the organization's MOST secure solution for protection of data? 

A. Public Key Infrastructure (PKI) and digital signatures 

B. Trusted server certificates and passphrases 

C. User ID and password 

D. Asymmetric encryption and User ID 

Answer: A 


Q150. At a MINIMUM, a formal review of any Disaster Recovery Plan (DRP) should be conducted 

A. monthly. 

B. quarterly. 

C. annually. 

D. bi-annually. 

Answer: C