CISSP study and training by Thor Teaches!

We have part of our infrastructure migrated to cloud computing. We are responsible for the applications and the data. Which type of cloud computing are we using?
A: IaaS.
B: SaaS
C: PaaS
D: IDaaS

CBK 3: Security Engineering
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

In quantitative risk analysis what does the ALE tell us?
A: The value of the asset.
B: How often that asset type is compromised per year.
C: What it will cost us per year if we do nothing.
D: How much of the asset is lost per incident.

CBK 1: Security and Risk Management
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

In our risk analysis we are looking at the risk. What would that comprise of?
A: Threat + vulnerability.
B: Threat * vulnerability.
C: Threat * vulnerability * asset value.
D: (threat * vulnerability * asset value) – countermeasures.

CBK 1: Security and Risk Management
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

As part of our ongoing Disaster Recovery Planning Bob is working on categorizing incidents. Which category would misconfigurations fall under?
A: Natural.
B: Environmental.
C: Human.
D: All of these.

CBK 7: Security Operations
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

Which type of IPv4 address is the range 172.31.0.0/24?
A: Loopback.
B: Link-local.
C: Private.
D: Public.

CBK 4: Communication and Network Security
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

Which type of authentication can also be used for identification?
A: Fingerprint.
B: Password.
C: Passport.
D: PIN.

CBK 5: Identity and Access Management
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

Why would we choose to delete a user account after the employee leaves the organization?
A: Regulations.
B: User’s privacy protection.
C: Accountability traceability for events discovered later.
D: Retention policy.

CBK 6: Security Assessment and Testing
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

On our workstations we are implementing new security measures. As part of that we will start blocking TCP port 20. Which protocol are we blocking?
A: FTP data transfer.
B: FTP control.
C: SSH.
D: Telnet.

CBK 4: Communication and Network Security
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

If we plan to use what we find in our digital forensics in a court of law, what should the evidence not be?
A: Accurate.
B: Authentic.
C: Admissible.
D: Compromised.

CBK 7: Security Operations
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/