ISC2 CISSP Quiz 6 Topic 6 Questions 26-30

Question: 1

Digital certificates used transport Layer security (TLS) supprot which of the following?

AServer identify and data confidentially

BInformation input validation

CMulti-Factor Authentication (MFA)

DNon-reputation controls and data encryption

Show Answer

Question: 2

Which would result in the GREATEST import following a breach to a cloud environmet?

AThe hypervisor host Is poorly seared

BThe same Logical Unit Number (LLN) is used for ail VMs

CInsufficient network segregation

DInsufficient hardening of Virtual Machines (VM)

Show Answer

Question: 3

Which of the following in the BEST way to reduce the impect of an externlly sourced flood attack?

AStock the source address at the firewall.

BHave this service provide block the source address.

CBlock all inbound traffic until the flood ends.

DHave the source service provider block the address

Show Answer

Question: 4

Why should Open Wab Application Secuirty Project (OWASP) Application Security Verification standards (ASVS) Level 1 be considered a MINIMUM level of protection for any wab application?

AASVS Level 1 ensures that applications are invulnerable to OWASP top 10 threats.

BOpportunistic attackers will look for any easily exploitable vulnerable applications.

CMost regulatory bodies consider ASVS Level 1 as a baseline set of controls for applications.

DSecuring applications at ASVS Level 1 provides adequate protection for sensitive data.

Show Answer

Question: 5

Which of the following is a strategy of grouping requirements in developing a security test and Evolution (ST&E)?

AStandards, policies, and procedures

BManagement, operational, and technical

CDocumentation, observation, and manual

DTactical, strategic, and financial

Show Answer

ISC2 CISSP Quiz:6 Topic:6 Questions:26-30