ISC2 CISSP Quiz 1 Topic 6 Questions 1-5

Question: 1

An organization is considering outsourcing applications and data to a Cloud Service Provider (CSP). Which of the following is the MOST important concern regarding privacy?

AThe CSP determines data criticality.

BThe CSP provides end-to-end encryption services.

CThe CSP's privacy policy may be developer by the organization.

DThe CSP may not be subject to the organization's country legation.

Show Answer

Question: 2

Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?

ATurn the computer on and collect volatile data.

BTurn the computer on and collect network information.

CLeave the computer off and prepare the computer for transportation to the laboratory

DRemove the hard drive, prepare it for transportation, and leave the hardware ta the scene.

Show Answer

Question: 3

An organization has implemented a new backup process which protects confidential data by encrypting the information stored on backup tapes. Which of the following is a MAJOR data confidentiality concern after the implementation of this new backup process?

ATape backup rotation

BPre-existing backup tapes

CTape backup compression

DBackup tape storage location

Show Answer

Question: 4

Match the types of e-authentication tokens to their description.

ADrag each e-authentication token on the left to its corresponding description on the right.

BLook-up secret token - A physical or electronic token that stores a set of secrets between the claimant and the credential service provider

COut-of-Band Token - A physical token that is uniquely addressable and can receive a verifier-selected secret for one-time use

DPre-registered Knowledge Token - A series of responses to a set of prompts or challenges established by the subscriber and credential service provider during the registration process
Memorized Secret Token - A secret shared between the subscriber and credential service provider that is typically character strings

Show Answer

Question: 5

Which of the following would be the FIRST step to take when implementing a patch management program?

APerform automatic deployment of patches.

BMonitor for vulnerabilities and threats.

CPrioritize vulnerability remediation.

DCreate a system inventory.

Show Answer

ISC2 CISSP Quiz:1 Topic:6 Questions:1-5