Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 151–155 (page: 32)

Updated On: 9-Feb-2026

When designing a new Voice over Internet Protocol (VoIP) network, an organization's top concern is preventing unauthorized users accessing the VoIP network.
Which of the following will BEST help secure the VoIP network?

  1. 802.11g
  2. Web application firewall (WAF)
  3. Transport Layer Security (TLS)
  4. 802.1x

Answer(s): D



A user's credential for an application is stored in a relational database. Which control protects the confidentiality of the credential while it is stored?

  1. Use a salted cryptographic hash of the password.
  2. Validate passwords using a stored procedure.
  3. Allow only the application to have access to the password field in order to verify user authentication.
  4. Encrypt the entire database and embed an encryption key in the application.

Answer(s): A



Which of the following frameworks provides vulnerability metrics and characteristics to support the National Vulnerability Database (NVD)?

  1. Common Vulnerabilities and Exposures (CVE)
  2. Center for Internet Security (CIS)
  3. Common Vulnerability Scoring System (CVSS)
  4. Open Web Application Security Project (OWASP)

Answer(s): C



A security architect is reviewing plans for an application with a Recovery Point Objective (RPO) of 15 minutes. The current design has all of the application infrastructure located within one co-location data center. Which security principle is the architect currently assessing?

  1. Disaster recovery (DR)
  2. Availability
  3. Redundancy
  4. Business continuity (BC)

Answer(s): B



Which factors MUST be considered when classifying information and supporting assets for risk management, legal discovery, and compliance?

  1. System owner roles and responsibilities, data handling standards, storage and secure development lifecycle requirements
  2. Compliance office roles and responsibilities, classified material handling standards, storage system lifecycle requirements
  3. Data stewardship roles, data handling and storage standards, data lifecycle requirements
  4. System authorization roles and responsibilities, cloud computing standards, lifecycle requirements

Answer(s): C



Viewing page 32 of 98
Viewing questions 156 - 160 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!