Free CISSP questions #45

CISSP Certification 2021 practice questions.
Source: https://thorteaches.com/ Free CISSP practice exam questions for the 2021 CISSP exam version.

ANSWER

The right answer is B.

Security assessments are internal assessments we do on systems, applications, and other environments. Security audits are similar to security assessments, but they are performed by external independent auditors. Security testing, we would do to ensure a certain control functions as expected. Security walkthroughs would not give us the full picture of the security of our systems or applications.

show less

Start learning today

CISSP: All videos and practice questions from ThorTeaches

What our students are saying:

Anthony Jones
Anthony JonesWCDC Site Supervisor Bunzl Safety Read More
A friend of mine first recommended Thor’s CISSP video series on Udemy and I was glad that he did! The course content was fantastic and to the point, and the real-world examples it provides helped me synthesize and apply the information. Also, a special shout out to the essential information elephants! (You’ll know what I mean). This resource was by far my favorite video series that I utilized in my successful studying for and passing of the CISSP exam in May 2020. Thank you for the fantastic content!
Danny Tolnay
Danny TolnayInfosec Analyst Hedge Fund Read More
Thor’s commitment to his students really comes through in his videos. He has a talent for keeping it to the essentials, and the little jokes that are peppered in every now and again help keep it feeling light and fresh. I am so glad that I found his material for my CISSP studies, he is definitely a big reason why I passed. Thanks Thor!
Sven De Preter
Sven De PreterSenior Network & System Administrator NV Antwerps Sportpaleis Read More
Thor’s bootcamp is a great way to recapitulate all the content provided in the CISSP CBK. It’s clear, concise, structured and affordable. Definitely a great tool that helps in preparing for the exam. Thanks Thor
Peter Peterson
Peter PetersonCyber Risk Management New York State Chief Information Security Office Read More
I am not sure what else there is to say that has not been said about Thor. You can tell he has a passion for teaching and really does care about his students. His videos are short and to the point which is wonderful for courses like CISSP which has such a large scope it makes it frustrating at times. Thor’s material is a breath of fresh air, and I can say without them I may not have passed. Thank you, Thor!
Previous
Next

Free CISSP questions #44

CISSP Certification 2021 practice questions.
Source: https://thorteaches.com/ Free CISSP practice exam questions for the 2021 CISSP exam version.

ANSWER

The right answer is C.

The first thing we should assess is if our current controls are sufficient. If they are there is no need to meet with the financial or legal teams, nor update any policies or procedures. Risk analysis of the compliance would come much later, if we decide our current countermeasures are not sufficient.

show less

Start learning today

CISSP: All videos and practice questions from ThorTeaches

What our students are saying:

Free CISSP questions #43

CISSP Certification 2021 practice questions.
Source: https://thorteaches.com/ Free CISSP practice exam questions for the 2021 CISSP exam version.

ANSWER

The right answer is A.

If we want to ensure a certain control is working as expected, we would use security testing. Security assessments are internal assessments we do on systems, applications, and other environments. Security audits are similar to security assessments, but they are performed by external independent auditors. Security walkthroughs would most often not show control functionality.

show less

Start learning today

CISSP: All videos and practice questions from ThorTeaches

What our students are saying:

Free CISSP questions #42

CISSP Certification 2021 practice questions.
Source: https://thorteaches.com/ Free CISSP practice exam questions for the 2021 CISSP exam version.

ANSWER

The right answer is A.

Francis should determine if there was an authorized change by reviewing the change tickets applied to that server that would account for the change; if the change is not authorized then Francis should alert Security Operations center (SOC). As configuration manager Francis should be informed of all changes affecting the application servers in production. At the instruction of SOC he may replace the three configuration files with copies from one of the other servers, although SOC may want to take copies for forensic investigation before the files are replaced. Simply doing so would undo the change, potentially clobbering an authorized change. If Francis simply calls the SOC they will want to review the authorized changes before Francis to replace the files. The hash functions always result in the same output for the same input, so it is not necessary to re-perform the hash.

show less

Start learning today

CISSP: All videos and practice questions from ThorTeaches

What our students are saying:

Free CISSP questions #41

CISSP Certification 2021 practice questions.
Source: https://thorteaches.com/ Free CISSP practice exam questions for the 2021 CISSP exam version.

ANSWER

The right answer is D.

The equipment at the alternate sites has little to do with how quickly the data can be restored. The other factors are more likely to affect the time required. The backup media has to be retrieved from either the offsite storage or a data vault; the physical and logical security controls may introduce delays; and the type of media used for the backups will determine the transfer speed to read the data, which is likely to be more the limiting factor than the speed at which the data can be written to disk.

show less

Start learning today