QUESTION: 261

A company needs to provide employee access to travel services, which are hosted by a third-party service provider. Employee experience is important, and when users are already authenticated, access to the travel portal is seamless. Which of the following methods is used to share information and grant user access to the travel portal?

Single sign-on (SSO) access
Security Assertion Markup Language (SAML) access
Open Authorization (OAuth) access
Federated access

Answer(s): D

Reveal Solution Next Question

QUESTION: 262

The Chief Executive Officer (CEO) wants to implement an internal audit of the company's information security posture. The CEO wants to avoid any bias in the audit process; therefore, has assigned the Sales Director to conduct the audit. After significant interaction over a period of weeks the audit concludes that the company's policies and procedures are sufficient, robust and well established. The CEO then moves on to engage an external penetration testing company in order to showcase the organization's robust information security stance. This exercise reveals significant failings in several critical security controls and shows that the incident response processes remain undocumented. What is the MOST likely reason for this disparity in the results of the audit and the external penetration test?

The audit team lacked the technical experience and training to make insightful and objective assessments of the data provided to them.
The scope of the penetration test exercise and the internal audit were significantly different.
The external penetration testing company used custom zero-day attacks that could not have been predicted.
The information technology (IT) and governance teams have failed to disclose relevant information to the internal audit team leading to an incomplete assessment being formulated.

Answer(s): A

Reveal Solution Next Question

QUESTION: 263

An information security administrator wishes to block peer-to-peer (P2P) traffic over Hypertext Transfer Protocol (HTTP) tunnels. Which of the following layers of the Open Systems Interconnection (OSI) model requires inspection?

Application
Transport
Session
Presentation

Answer(s): A

Reveal Solution Next Question

QUESTION: 264

A Chief Information Officer (CIO) has delegated responsibility of their system security to the head of the information technology (IT) department. While corporate policy dictates that only the CIO can make decisions on the level of data protection required, technical implementation decisions are done by the head of the IT department. Which of the following BEST describes the security role filled by the head of the IT department?

System security officer
System processor
System custodian
System analyst

Answer(s): C

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 66)

QUESTION: 261

QUESTION: 262

QUESTION: 263

QUESTION: 264