Question 1

Which of the following is an attacker MOST likely to target to gain privileged access to a system?

Options :

A : Programs that write to system resources

B : Programs that write to user directories

C : Log files containing sensitive information

D : Log files containing system calls

Answer: A

Question 2

At which layer of the Open Systems Interconnect (OSI) model are the source and destination address for a datagram handled?

Options :

A : Transport Layer

B : Data-Link Layer

C : Network Layer

D : Application Layer

Answer: C

Question 3

The use of proximity card to gain access to a building is an example of what type of security control?

Options :

A : Legal

B : Logical

C : Physical

D : Procedural

Answer: C

Question 4

Which of the following is included in change management?

Options :

A : Business continuity testing

B : User Acceptance Testing (UAT) before implementation

C : Technical review by business owner

D : Cost-benefit analysis (CBA) after implementation

Answer: A

Question 5

Which of the following is a PRIMARY advantage of using a third-party identity service?

Options :

A : Consolidation of multiple providers

B : Directory synchronization

C : Web based logon

D : Automated account management

Answer: D

Free CISSP Mock Exam – Practice Online Confidently