CISSP Free Practice Test

- (Exam Topic 11)
What is the GREATEST challenge of an agent-based patch management solution?

1. A. Time to gather vulnerability information about the computers in the program
2. B. Requires that software be installed, running, and managed on all participating computers
3. C. The significant amount of network bandwidth while scanning computers
4. D. The consistency of distributing patches to each participating computer

Correct Answer: B

- (Exam Topic 15)
Which of the following is the MOST common cause of system or security failures?

1. A. Lack of system documentation
2. B. Lack of physical security controls
3. C. Lack of change control
4. D. Lack of logging and monitoring

Correct Answer: D

- (Exam Topic 12)
In configuration management, what baseline configuration information MUST be maintained for each computer system?

1. A. Operating system and version, patch level, applications running, and versions.
2. B. List of system changes, test reports, and change approvals
3. C. Last vulnerability assessment report and initial risk assessment report
4. D. Date of last update, test report, and accreditation certificate

Correct Answer: A

- (Exam Topic 9)
Which of the following is a security feature of Global Systems for Mobile Communications (GSM)?

1. A. It uses a Subscriber Identity Module (SIM) for authentication.
2. B. It uses encrypting techniques for all communications.
3. C. The radio spectrum is divided with multiple frequency carriers.
4. D. The signal is difficult to read as it provides end-to-end encryption.

Correct Answer: A

- (Exam Topic 10)
Which item below is a federated identity standard?

1. A. 802.11i
2. B. Kerberos
3. C. Lightweight Directory Access Protocol (LDAP)
4. D. Security Assertion Markup Language (SAML)

Correct Answer: D