CISSP Exam Dumps – Our Features

An application developer receives a report back from the security team showing their automated tools were able to successfully enter unexpected data into the organization's customer service portal, causing the site to crash. This is an example of which type of testing?

• Non-functional
• Positive
• Performance
• Negative

An organization's retail website provides its only source of revenue, so the disaster recovery plan (DRP) must document an estimated time for each step in the plan.Which of the following steps in the DRP will list the GREATEST duration of time for the service to be fully operational?

• Update the Network Address Translation (NAT) table.
• Update Domain Name System (DNS) server addresses with domain registrar.
• Update the Border Gateway Protocol (BGP) autonomous system number.
• Update the web server network adapter configuration.

The BEST way to check for good security programming practices, as well as auditing for possible backdoors, is to conduct

• log auditing.
• code reviews.
• impact assessments.
• static analysis.

An organization has decided to contract with a cloud-based service provider to leverage their identity as a service offering. They will use Open Authentication (OAuth) 2.0 to authenticate external users to the organization's services.As part of the authentication process, which of the following must the end user provide?

• An access token
• A username and password
• A username
• A password

Which of the following would BEST support effective testing of patch compatibility when patches are applied to an organization's systems?

• Standardized configurations for devices
• Standardized patch testing equipment
• Automated system patching
• Management support for patching

Which Hyper Text Markup Language 5 (HTML5) option presents a security challenge for network data leakage prevention and/or monitoring?

• Cross Origin Resource Sharing (CORS)
• WebSockets
• Document Object Model (DOM) trees
• Web Interface Definition Language (IDL)

Which of the following is the FIRST step of a penetration test plan?

• Analyzing a network diagram of the target network
• Notifying the company's customers
• Obtaining the approval of the company's management
• Scheduling the penetration test during a period of least impact

Which of the following command line tools can be used in the reconnaisance phase of a network vulnerability assessment?

• dig
• ifconfig
• ipconfig
• nbtstat

Refer to the information below to answer the question.A large organization uses unique identifiers and requires them at the start of every system session. Application access is based on job classification. The organization is subject to periodic independent reviews of access controls and violations. The organization uses wired and wireless networks and remote access. The organization also uses secure connections to branch offices and secure backup and recovery strategies for selected information and processes.What MUST the access control logs contain in addition to the identifier?

• Time of the access
• Security classification
• Denied access attempts
• Associated clearance

A security engineer is assigned to work with the patch and vulnerability management group. The deployment of a new patch has been approved and needs to be applied.The research is complete, and the security engineer has provided recommendations. Where should the patch be applied FIRST?

• Server environment
• Desktop environment
• Lower environment
• Production environment