CISSP PRACTICE QUESTIONS – 20230310

Effective CISSP Questions

A legacy web server in your company is suffering from a denial of service attack from a malicious source. Which of the following attacks is least likely initiated by the attacker? (Wentz QOTD)
A. Teardrop Attack
B. Smurf Attack
C. LAND (Local Area Network Denial) Attack
D. Ping of Death Attack


Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

Continue reading →

CISSP PRACTICE QUESTIONS – 20230309

Effective CISSP Questions

A legacy web server in your company is suffering from a denial of service attack from a malicious source. Which of the following techniques is least likely used by the attacker? (Wentz QOTD)
A. Overlapping IP fragments
B. Spoofing the source IP address
C. Crafting ICMP Packet
D. Sending malformed or oversized packets


Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

Continue reading →

CISSP PRACTICE QUESTIONS – 20230308

Effective CISSP Questions

You are conducting a risk-based internal audit for your company. Which of the following is the most critical factor determining the audit’s effectiveness? (Wentz QOTD)
A. Audit criteria
B. Security controls
C. Business objectives
D. Security control frameworks.


Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

Continue reading →

CISSP PRACTICE QUESTIONS – 20230307

Effective CISSP Questions

After conducting vulnerability scanning, your security team reports an urgent and critical operating system vulnerability. Which of the following is the best action the IT operations team should take? (Wentz QOTD)
A. Follow the standard change procedure to apply the patch immediately.
B. Apply the patch after a normal change request has been approved.
C. Apply the patch immediately, then submit an aftermath change request.
D. Submit a change request with priority for acceleration, but apply the patch after approval.


Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

Continue reading →

CISSP PRACTICE QUESTIONS – 20230306

Effective CISSP Questions

Given a network comprising two segments of network cables carrying the digital signal and connected by a repeater, which of the following is correct? (Wentz QOTD)
A. The network has one collision domain.
B. The network uses broadband transmission.
C. The repeater creates two broadcast domains.
D. The repeater modulates and demodulates the signal to have it travel a greater distance.


Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

Continue reading →