Free ISC CISSP Exam Dumps Questions & Answers

Which of the following BEST describes the purpose of "Egress Point Data Provenance Tracking" using blockchain or distributed ledger technology?

• A.  A method for compressing large datasets for archival purposes
• B.  Encrypting data using a symmetric algorithm exclusively
• C.  A technique used exclusively for managing DNS records
• D.  Creating an immutable, verifiable record of data's origin, custody, and any modifications over time, helping establish trust and traceability, particularly in multi-party or supply chain data-sharing scenarios

Which one of the following is a common risk with network configuration management?

• A.  Network diagrams are not up to date.
• B.  It is the responsibility of the systems administrator.
• C.  User ID and passwords are never set to expire.
• D.  Patches on the network are difficult to keep current.

Which of the following BEST describes "annualized rate of occurrence (ARO)" in quantitative risk analysis?

• A.  The percentage of asset value lost in a single incident
• B.  The total cost of implementing a control over one year
• C.  The total financial loss expected in a single occurrence of a risk
• D.  The estimated frequency with which a specific threat is expected to occur within a one-year period

Which of the following MUST system and database administrators be aware of and apply when configuring systems used for storing personal employee data?

• A.  The organization's security policies and standards
• B.  The overall protection of corporate resources and data
• C.  The business purpose for which the data is to be used
• D.  Secondary use of the data by business users

Refer to the information below to answer the question.
A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provider's facility. This provider will be responsible for the design, development, testing, and support of several critical, customer-based applications used by the organization.
The third party needs to have

• A.  access to the original personnel that were on staff at the organization.
• B.  processes that are identical to that of the organization doing the outsourcing.
• C.  access to the skill sets consistent with the programming languages used by the organization.
• D.  the ability to maintain all of the applications in languages they are familiar with.