CISSP study and training by Thor Teaches!

What do we often uncover in our vulnerability scans?
A: Open ports that should not be.
B: Unauthorized users.
C: Attacks.
D: None of these.

CBK 6: Security Assessment and Testing
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

In our access management we would never want to use group user accounts. Why is that?
A: No authentication.
B: No accountability.
C: No authorization.
D: No availability.

CBK 5: Identity and Access Management
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

We have part of our infrastructure migrated to cloud computing. We are responsible for the applications and the data. Which type of cloud computing are we using?
A: IaaS.
B: SaaS
C: PaaS
D: IDaaS

CBK 3: Security Engineering
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

In quantitative risk analysis what does the ALE tell us?
A: The value of the asset.
B: How often that asset type is compromised per year.
C: What it will cost us per year if we do nothing.
D: How much of the asset is lost per incident.

CBK 1: Security and Risk Management
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

In our risk analysis we are looking at the risk. What would that comprise of?
A: Threat + vulnerability.
B: Threat * vulnerability.
C: Threat * vulnerability * asset value.
D: (threat * vulnerability * asset value) – countermeasures.

CBK 1: Security and Risk Management
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

As part of our ongoing Disaster Recovery Planning Bob is working on categorizing incidents. Which category would misconfigurations fall under?
A: Natural.
B: Environmental.
C: Human.
D: All of these.

CBK 7: Security Operations
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

Which type of IPv4 address is the range 172.31.0.0/24?
A: Loopback.
B: Link-local.
C: Private.
D: Public.

CBK 4: Communication and Network Security
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

Which type of authentication can also be used for identification?
A: Fingerprint.
B: Password.
C: Passport.
D: PIN.

CBK 5: Identity and Access Management
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/

Why would we choose to delete a user account after the employee leaves the organization?
A: Regulations.
B: User’s privacy protection.
C: Accountability traceability for events discovered later.
D: Retention policy.

CBK 6: Security Assessment and Testing
Source: ThorTeaches.com practice tests – https://www.udemy.com/user/thorpedersen/