ISC2 CISSP Quiz 2 Topic 5 Questions 6-10

Question: 1

A user downloads a file from the Internet, then applies the Secure Hash Algorithm 3 (SHA-3) to it. Which of the following is the MOST likely reason for doing so?

AIt verifies the integrity of the file.

BIt checks the file for malware.

CIt ensures the entire file downloaded.

DIt encrypts the entire file.

Show Answer

Question: 2

Directive controls are a form of change management policy and procedures. Which of the following subsections are recommended as part of the change management process?

ABuild and test

BImplement security controls

CCategorize Information System (IS)

DSelect security controls

Show Answer

Question: 3

Which of the following is the BEST reason to apply patches manually instead of automated patch management?

AThe cost required to install patches will be reduced.

BThe time during which systems will remain vulnerable to an exploit will be decreased.

CThe target systems reside within isolated networks.

DThe ability to cover large geographic areas is increased.

Show Answer

Question: 4

Which of the following is a peor entity authentication method for Point-to-Point Protocol (PPP)?

AChallenge Handshake Authentication Protocol (CHAP)

BMessage Authentication Code (MAC)

CTransport Layer Security (TLS) handshake protocol

DChallenge-response authentication mechanism

Show Answer

Question: 5

Which of the following practices provides the development team with a definition of security and identification of threats in designing software?

APenetration testing

BStakeholder review

CThreat modeling

DRequirements review

Show Answer

ISC2 CISSP Quiz:2 Topic:5 Questions:6-10