Confidently Practice Online with Free CISSP Exam Cram

Practice your Certified Information Systems Security Professional certification test with free CISSP exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CISSP exam dumps, verified questions, and expert-designed free online practice tests. Moreover our ISC2 CISSP exam cram backed by our confidence-boosting refund guarantee.

Question 1

Alternate encoding such as hexadecimal representations is MOST often observed in which of the following forms of attack?

Options :

A : Smurf

B : Rootkit exploit

C : Denial of Service (DoS)

D : Cross site scripting (XSS)

Answer: D

Question 2

When designing a Cyber-Physical System (CPS), which of the following should be a security practitioner's first consideration?

Options :

A : Detection of sophisticated attackers

B : Resiliency of the system

C : Topology of the network used for the system

D : Risk assessment of the system

Answer: B

Question 3

What action should be taken by a business line that is unwilling to accept the residual risk in a system after implementing compensating controls?

Options :

A : Notify the audit committee of the situation.

B : Purchase insurance to cover the residual risk.

C : Implement operational safeguards.

D : Find another business line willing to accept the residual risk.

Answer: B

Question 4

Which of the following actions should be taken by a security professional when a mission critical computer network attack is suspected?

Options :

A : Isolate the network, log an independent report, fix the problem, and redeploy the computer.

B : Isolate the network, install patches, and report the occurrence.

C : Prioritize, report, and investigate the occurrence.

D : Turn the rooter off, perform forensic analysis, apply the appropriate fin, and log incidents.

Answer: C

Question 5

Functional security testing is MOST critical during which phase of the system development life cycle (SDLC)?

Options :

A : Operations / Maintenance

B : Implementation

C : Acquisition / Development

D : Initiation

Answer: B