View All CISSP Actual Exam Questions, Answers and Explanations for Free [Q171-Q194]

QUESTION 171
In which mode of DES, will a block of plaintext and a key always give the same ciphertext?

QUESTION 172
Buffer overflow and boundary condition errors are subsets of which of the following?

QUESTION 173
In regards to the query function of relational database operations, which of the following represent implementation procedures that correspond to each of the low-level operations in the query?

QUESTION 174
As a best practice, the Security Assessment Report (SAR) should include which of the following sections?

QUESTION 175
What would you call an attack where an attacker can influence the state of the resource between check and use?
This attack can happen with shared resources such as files, memory, or even variables in multithreaded programs. This can cause the software to perform invalid actions when the resource is in an unexpected state. The steps followed by this attack are usually the following: the software checks the state of a resource before using that resource, but the resource’s state can change between the check and the use in a way that invalidates the results of the check.

QUESTION 176
Which of the choices below is NOT an OSI reference model Session
Layer protocol, standard, or interface?

QUESTION 177
Context-dependent control uses which of the following to make decisions?

QUESTION 178
Which type of control is concerned with avoiding occurrences of risks?

QUESTION 179
An organization implements a Remote Access Server (RAS). Once users correct to the server, digital certificates are used to authenticate their identity. What type of Extensible Authentication Protocol (EAP) would the organization use dring this authentication?

QUESTION 180
Which of the following embodies all the detailed actions that personnel are required to follow?

QUESTION 181
Which of the following access control models requires defining classification for objects?

QUESTION 182
Which model, based on the premise that the quality of a software product is a direct function of the quality of its associated software development and maintenance processes, introduced five levels with which the maturity of an organization involved in the software process is evaluated?

QUESTION 183
The control of communications test equipment should be clearly addressed by security policy for which of the following reasons?

QUESTION 184
Which policy type is MOST likely to contain mandatory or compulsory
standards?

QUESTION 185
Which of the following offers confidentiality to an e-mail message?

QUESTION 186
Kerberos provides an integrity check service for messages between two
entities through the use of:

QUESTION 187
The act of requiring two of the three factors to be used in the authentication process refers to:

QUESTION 188
Multi-threaded applications are more at risk than single-threaded applications to

QUESTION 189
Backup information that is critical to the organization is identified through a

QUESTION 190
Examine the following characteristics and identify which answer best indicates the likely cause of this behavior:
– Core operating system files are hidden
– Backdoor access for attackers to return
– Permissions changing on key files
– A suspicious device driver
– Encryption applied to certain files without explanation
– Logfiles being wiped

QUESTION 191
Which of the following cloud deployment model can be shared by several organizations?

QUESTION 192
What is the process that RAID Level 0 uses as it creates one large disk by using several disks?

QUESTION 193
What is the PRIMARY goal of incident handling?

QUESTION 194
In order to recognize the practical aspects of multilevel security in
which, for example, an unclassified paragraph in a Secret document has
to be moved to an Unclassified document, the Bell-LaPadula model
introduces the concept of a: