CISSP PRACTICE QUESTIONS – 20200925

Effective CISSP Questions

Which of the following statements about user and entity behavior analytics (UEBA) is not true?
A. UEBA collects live data from various sources, as SIEM does.
B. UEBA analyzes user behavior only, while SIEM monitors network device activities.
C. UEBA detects potential insider threats and compromised accounts.
D. UEBA sends alerts and reduces false positives.

Continue reading

CISSP PRACTICE QUESTIONS – 20200924

Effective CISSP Questions

Threat feeds convey a large quantity of data, including Indicators of Compromise (IoCs), pieces of forensic data that identify potentially malicious activities. Security analysts analyze, enrich, and turn them into threat intelligence, and security teams use them to look for persistent threats and recently discovered or zero-day exploits. Which of the following indicators provided by threat feeds provides the most value?
A. Host Artifacts
B. Domain Names
C. Hash Values
D. Tools

Continue reading

CISSP PRACTICE QUESTIONS – 20200923

Effective CISSP Questions

Bob is suffering from allegations of sexual harassment by Alice. His company receives the complaint and is considering an investigation to determine if he is responsible. If so, disciplinary action will be taken. As an investigator, which of the following is least likely to happen in the investigation?
A. Dismiss the case
B. Determine powers of investigation
C. Ask for Bob’s legal representation
D. Gather evidence

Continue reading

CISSP PRACTICE QUESTIONS – 20200921

Effective CISSP Questions

Alice and Bob work together to develop a log parser using C++.  Alice is linking the main program with the modules in object code developed by Bob. The log parser loads all the dependent modules when it starts. Which of the following best describes the role of Bob’s modules?
A. Software Development Kit (SDK)
B. Runtime library
C. Static library
D. Application Programming Interface (API)

Continue reading

CISSP PRACTICE QUESTIONS – 20200919

Effective CISSP Questions

An in-house development team in your organization is tasked to develop a new information system deployed to a public PaaS to support a new mission. A well-known consulting firm, enlisted in your organizational approved providers and offerings, is contracted to advise cloud services. Some of the tools used by developers are freeware downloaded from the internet. Which of the following acquisition sources is not used in this project?
A. Commercial-off-the-shelf (COTS)
B. Open Source
C. Managed services
D. Third-party

Continue reading