QUESTION: 217

When developing an external facing web-based system, which of the following would be the MAIN focus of the security assessment prior to implementation and production?

Ensuring Secure Sockets Layer (SSL) certificates are signed by a certificate authority
Ensuring Secure Sockets Layer (SSL) certificates are internally signed
Assessing the Uniform Resource Locator (URL)
Ensuring that input validation is enforced

Answer(s): D

Reveal Solution Next Question

A financial services organization has employed a security consultant to review processes used by employees across various teams. The consultant interviewed a member of the application development practice and found gaps in their threat model. Which of the following correctly represents a trigger for when a threat model should be revised?

After operating system (OS) patches are applied
A new developer is hired into the team.
After a modification to the firewall rule policy
A new data repository is added.

Answer(s): D

Reveal Solution Next Question

QUESTION: 219

The Chief Information Security Officer (CISO) of an organization has requested that a Service Organization Control (SOC) report be created to outline the security and availability of a particular system over a 12-month period. Which type of SOC report should be utilized?

SOC 1 Type 1
SOC 1 Type 2
SOC 2 Type 2
SOC 3 Type 1

Answer(s): C

Reveal Solution Next Question

QUESTION: 220

An organization recently upgraded to a Voice over Internet Protocol (VoIP) phone system. Management is concerned with unauthorized phone usage. The security consultant is responsible for putting together a plan to secure these phones. Administrators have assigned unique personal identification number (PIN) codes for each person in the organization. What is the BEST solution?

Have the administrator enforce a policy to change the PIN regularly. Implement call detail records (CDR) reports to track usage.
Have the administrator change the PIN regularly. Implement call detail records (CDR) reports to track usage.
Use phone locking software to enforce usage and PIN policies. Inform the user to change the PIN regularly.
Implement call detail records (CDR) reports to track usage.

Answer(s): A

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 55)

QUESTION: 217

QUESTION: 218

QUESTION: 219

QUESTION: 220