Free ISC CISSP Exam Dumps Questions & Answers

A retail company is looking to start a development project that will utilize open source components in its code for the first time. The development team has already acquired several open source components and utilized them in proof of concept (POC) code. The team recognizes that the legal and operational risks are outweighed by the benefits of open-source software use.
What MUST the organization do next?

• A.  Require commercial support for all open-source components.
• B.  Mandate that all open-source components be approved by the Information Security Manager (ISM).
• C.  Establish an open-source compliance policy.
• D.  Scan all open-source components for security vulnerabilities.

Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

• A.  A network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device.
• B.  A network-based firewall blocks network intrusions, while a host-based firewall blocks malware.
• C.  A network-based firewall verifies network traffic, while a host-based firewall verifies processes and applications.
• D.  A network-based firewall is stateful, while a host-based firewall is stateless.

Who should perform the design review to uncover security design flaws as part of the Software Development Life Cycle (SDLC)?

• A.  A developer subject matter expert (SME)
• B.  The business owner
• C.  The application owner
• D.  security subject matter expert (SME)

Which of the following virtual network configuration options is BEST to protect virtual machines (VM)?

• A.  Data encryption
• B.  Traffic filtering
• C.  Traffic throttling
• D.  Data segmentation

What is the PRIMARY goal of fault tolerance?

• A.  Isolation using a sandbox
• B.  Single point of repair
• C.  Containment to prevent propagation
• D.  Elimination of single point of failure