Online Access Free CISSP Practice Test

A security professional determines that a number of outsourcing contracts inherited from a previous merger do not adhere to the current security requirements. Which of the following BEST minimizes the risk of this happening again?

• A.Include a procurement officer in the merger team
• B.Define additional security controls directly after the merger
• C.Assign a compliancy officer to review the merger conditions
• D.Verify all contracts before a merger occurs

Which of the following technologies can be used to monitor and dynamically respond to potential threats on web applications?

• A.Security Assertion Markup Language (SAML)
• B.Field-level tokenization
• C.Web application vulnerability scanners
• D.Runtime application self-protection (RASP)

Which of the following is critical if an empolyee is dismissed due to violation of an organization's acceptable use policy (Aup)?

• A.privilege suspension
• B.Appropriate documentation
• C.Internet access logs
• D.proxy records

A company needs to provide shared access of sensitive data on a cloud storage to external business partners. Which of the following identity models is the BEST to blind identity providers (IdP) and relying parties (RP) so that subscriber lists of other parties are not disclosed?

• A.Static registration
• B.Dynamic registration
• C.Federation authorities
• D.Proxied federation

During the procurement of a new information system, it was determined that some of the security requirements were not addressed in the system specification. Which of the following is the MOST likely reason for this?

• A.The security requirements have changed during the procurement process.
• B.The description of the security requirements was insufficient.
• C.The procurement officer lacks technical knowledge.
• D.There were no security professionals in the vendor's bidding team.