ISC2 CISSP Certified Information Systems Security Professional Exam Practice Test Questions

• Question 1

  Which item below is a federated identity standard?

  • 802.11i
  • Kerberos
  • Lightweight Directory Access Protocol (LDAP)
  • Security Assertion Markup Language (SAML)

  Show Answer Answer: D Next

• Question 2

  The Hardware Abstraction Layer (HAL) is implemented in the

  • System software.
  • System hardware.
  • Application software.
  • Network hardware.

  Show Answer Answer: A Next

• Question 3

  Which of the following is a limitation of the Bell-LaPadula model?

  • Segregation of duties (SoD) is difficult to implement as the 'no read-up' rule limits the ability of an object to access information with a higher classification.
  • Mandatory access control (MAC) is enforced at all levels making discretionary access control (DAC) impossible to implement.
  • It contains no provision or policy for changing data access control and works well only with access systems that are static in nature.
  • It prioritizes integrity over confidentiality which can lead to inadvertent information disclosure.

  Show Answer Answer: A Next

• Question 4

  A software engineer uses automated tools to review application code and search for application flaws, back doors, or other malicious code. Which of the following is theFIRST Software Development Life Cycle (SDLC) phase where this takes place?

  • Design
  • Test
  • Development
  • Deployment

  Show Answer Answer: C Next

• Question 5

  What is the MOST common component of a vulnerability management framework?

  • Risk analysis
  • Patch management
  • Threat analysis
  • Backup management

  Show Answer Answer: B Next