Question 1

Which of the following is the MOST effective preventative method to identify security flaws in software?

Options :

A : Monitor performance in production environments.

B : Perform a structured code review.

C : Perform application penetration testing.

D : Use automated security vulnerability testing tods.

Answer: B

Question 2

Who is responsible for the protection of information when it is shared with or provided to other organizations?

Options :

A : Systems owner

B : Authorizing Official (AO)

C : Information owner

D : Security officer

Answer: C

Question 3

An employee receives a promotion that entities them to access higher-level functions on the company's accounting system, as well as keeping their access to the previous system that is no longer needed or applicable. What is the name of the process that tries to remove this excess privilege?

Options :

A : Access provisioning

B : Segregation of Duties (SoD)

C : Access certification

D : Access aggregation

Answer: B

Question 4

What are the first two components of logical access control?

Options :

A : Confidentiality and authentication

B : Authentication and identification

C : Identification and confidentiality

D : Authentication and availability

Answer: B

Question 5

Alternate encoding such as hexadecimal representations is MOST often observed in which of the following forms of attack?

Options :

A : Smurf

B : Rootkit exploit

C : Denial of Service (DoS)

D : Cross site scripting (XSS)

Answer: D

Free CISSP Mock Exam – Practice Online Confidently

Buying Options: