Question 1

An organization plans to acquire @ commercial off-the-shelf (COTS) system to replace their aging home-built reporting system. When should the organization's security team FIRST get involved in this acquisition's life cycle?

Options :

A : When the system is being designed, purchased, programmed, developed, or otherwise constructed

B : When the system is verified and validated

C : When the system is deployed into production

D : When the need for a system is expressed and the purpose of the system Is documented

Answer: D

Question 2

In fault-tolerant systems, what do rollback capabilities permit?

Options :

A : Restoring the system to a previous functional state

B : Identifying the error that caused the problem

C : Allowing the system to an in a reduced manner

D : Isolating the error that caused the problem

Answer: A

Question 3

A developer is creating an application that requires secure logging of all user activity. What is the BEST permission the developer should assign to the log file to ensure requirements are met?

Options :

A : Read

B : Execute

C : Write

D : Append

Answer: C

Question 4

An organization recently upgraded to a Voice over Internet Protocol (VoIP) phone system. Management is concerned with unauthorized phone usage. security

consultant is responsible for putting together a plan to secure these phones. Administrators have assigned unique personal identification number codes for each

person in the organization. What is the BEST solution?

Options :

A : Use phone locking software to enforce usage and PIN policies.

B : Inform the user to change the PIN regularly. Implement call detail records (CDR) reports to track usage.

C : Have the administrator enforce a policy to change the PIN regularly. Implement call detail records (CDR) reports to track usage.

D : Have the administrator change the PIN regularly. Implement call detail records (CDR) reports to track usage.

Answer: C

Question 5

A large human resources organization wants to integrate their identity management with a trusted partner organization. The human resources organization wants to maintain the creation and management of the identities and may want to share with other partners in the future. Which of the following options BEST serves their needs?

Options :

A : Federated identity

B : Cloud Active Directory (AD)

C : Security Assertion Markup Language (SAML)

D : Single sign-on (SSO)

Answer: A

Free CISSP Mock Exam – Practice Online Confidently

Buying Options: