Free ISC CISSP Exam Dumps Questions & Answers

Which of the following is the MOST important consideration in selecting a security testing method based on different Radio-Frequency Identification (RFID) vulnerability types?

• A.Adaptability of testing tools to multiple technologies
• B.An understanding of the attack surface
• C.The performance and resource utilization of tools
• D.The quality of results and usability of tools

For a federated identity solution, a third-party Identity Provider (IdP) is PRIMARILY responsible for which of the following?

• A.Authentication
• B.Authorization
• C.Account Management
• D.Access Control

Which of the following BEST describes the concept of "least privilege"?

• A.Users share a single privileged account for auditing purposes
• B.Users are granted temporary elevated access indefinitely
• C.Users are granted only the access necessary to perform their specific job duties
• D.Users are granted the maximum access needed to perform any job function

Which of the following types of devices can provide content filtering and threat protection, and manage multiple IPSec site-to-site connections?

• A.Intrusion prevention
• B.VPN headend
• C.Layer 3 switch
• D.Proxy server
• E.Next-generation firewall

Which of the following actions MUST be taken if a vulnerability is discovered during the maintenance stage in a System Development Life Cycle (SDLC)?

• A.Stop the application until the vulnerability is fixed.
• B.Report the vulnerability to product owner.
• C.Monitor the application and review code.
• D.Make changes following principle and design guidelines.