Exam Code: CISSP (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Certified Information Systems Security Professional (CISSP)
Certification Provider: ISC2
Free Today! Guaranteed Training- Pass CISSP Exam.

2021 Oct CISSP latest exam

Q111. Which item below is a federated identity standard? 

A. 802.11i 

B. Kerberos 

C. Lightweight Directory Access Protocol (LDAP) 

D. Security Assertion Markup Language (SAML) 

Answer: D 


Q112. What is the.BEST.first step.for determining if the appropriate security controls are in place for protecting data at rest? 

A. Identify regulatory requirements 

B. Conduct a risk assessment 

C. Determine.business drivers 

D. Review the.security baseline configuration 

Answer: B 


Q113. Which of the following methods provides the MOST protection for user credentials? 

A. Forms-based authentication 

B. Digest authentication 

C. Basic authentication 

D. Self-registration 

Answer: B 


Q114. Which of the following does the Encapsulating Security Payload (ESP) provide? 

A. Authorization and integrity 

B. Availability and integrity 

C. Integrity and confidentiality 

D. Authorization and confidentiality 

Answer: C 


Q115. DRAG DROP 

During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant. 

What is the best approach for the CISO? 

Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location. 

Answer: 


Up to the minute CISSP exam prep:

Q116. How can a forensic specialist exclude from examination a large percentage of operating system files residing on a copy of the target system? 

A. Take another backup of the media in question then delete all irrelevant operating system files. 

B. Create a comparison database of cryptographic hashes of the files from a system with the same operating system and patch level. 

C. Generate a message digest (MD) or secure hash on the drive image to detect tampering of the media being examined. 

D. Discard harmless files for the operating system, and known installed programs. 

Answer: B 


Q117. Refer.to the information below to answer the question. 

Desktop computers in an organization were sanitized.for re-use.in an equivalent security environment. The data was destroyed in accordance with organizational policy and all marking and other external indications of the sensitivity of the data that was formerly stored on the magnetic drives were removed. 

Organizational policy requires the deletion of user data from Personal Digital Assistant (PDA) devices before disposal. It may not be possible to delete the user data if the device is malfunctioning. Which destruction method below provides the BEST assurance that the data has been removed? 

A. Knurling 

B. Grinding 

C. Shredding.

D. Degaussing 

Answer: C 


Q118. Which of the following prevents improper aggregation of privileges in Role Based Access Control (RBAC)? 

A. Hierarchical inheritance 

B. Dynamic separation of duties 

C. The Clark-Wilson security model 

D. The Bell-LaPadula security model 

Answer: B 


Q119. To prevent inadvertent disclosure of restricted information, which of the following would be the LEAST effective process for eliminating data prior to the media being discarded? 

A. Multiple-pass overwriting 

B. Degaussing 

C. High-level formatting 

D. Physical destruction 

Answer: C 


Q120. DRAG DROP 

Match the objectives to the assessment questions in the governance domain of Software Assurance Maturity Model (SAMM). 

Answer: