Exam Code: CISSP (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Certified Information Systems Security Professional (CISSP)
Certification Provider: ISC2
Free Today! Guaranteed Training- Pass CISSP Exam.

2021 Mar CISSP simulations

Q171. The BEST method to mitigate the risk of a dictionary attack on a system is to 

A. use a hardware token. 

B. use complex passphrases. 

C. implement password history. 

D. encrypt the access control list (ACL). 

Answer: A 


Q172. Which of the following entities is ultimately.accountable.for data remanence vulnerabilities with data replicated by a cloud service provider? 

A. Data owner 

B. Data steward 

C. Data custodian 

D. Data processor 

Answer: A 


Q173. Which one of the following is the MOST important in designing a biometric access system if it is essential that no one other than authorized individuals are admitted? 

A. False Acceptance Rate (FAR) 

B. False Rejection Rate (FRR) 

C. Crossover Error Rate (CER) 

D. Rejection Error Rate 

Answer: A 


Q174. Application of which of the following Institute of Electrical and Electronics Engineers (IEEE) standards will prevent an unauthorized wireless device from being attached to a network? 

A. IEEE 802.1F 

B. IEEE 802.1H 

C. IEEE 802.1Q 

D. IEEE 802.1X 

Answer: D 


Q175. Which of the following questions can be answered using user and group entitlement reporting? 

A. When a particular file was last accessed by a user 

B. Change control activities for a particular group of users 

C. The number of failed login attempts for a particular user 

D. Where does a particular user have access within the network 

Answer: D 


Latest CISSP exam question:

Q176. When dealing with compliance with the Payment Card Industry-Data Security Standard (PCI-DSS), an organization that shares card holder information with a service provider MUST do which of the following? 

A. Perform a service provider PCI-DSS assessment on a yearly basis. 

B. Validate.the service provider's PCI-DSS compliance status on a regular basis. 

C. Validate.that the service providers security policies are in alignment with those.of the organization. 

D. Ensure that the service provider.updates and tests its Disaster Recovery Plan (DRP).on a yearly basis. 

Answer: B 


Q177. Which of the following is an effective method for avoiding magnetic media data 

remanence? 

A. Degaussing 

B. Encryption 

C. Data Loss Prevention (DLP) 

D. Authentication 

Answer: A 


Q178. If compromised, which of the following would lead to the exploitation of multiple virtual machines? 

A. Virtual device drivers 

B. Virtual machine monitor 

C. Virtual machine instance 

D. Virtual machine file system 

Answer: B 


Q179. Which of the following is the best practice for testing a Business Continuity Plan (BCP)? 

A. Test.before the IT Audit 

B. Test when environment changes 

C. Test after installation of security patches 

D. Test after implementation of system patches 

Answer: B 


Q180. The use of strong authentication, the encryption of Personally Identifiable Information (PII) on database servers, application security reviews, and the encryption of data transmitted across networks provide 

A. data integrity. 

B. defense in depth. 

C. data availability. 

D. non-repudiation. 

Answer: B