Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 186–190 (page: 39)

Updated On: 9-Feb-2026

What is static analysis intended to do when analyzing an executable file?

  1. Search the documents and files associated with the executable file.
  2. Analyze the position of the file in the file system and the executable file's libraries.
  3. Collect evidence of the executable file's usage, including dates of creation and last use.
  4. Disassemble the file to gather information about the executable file's function.

Answer(s): D



A network security engineer needs to ensure that a security solution analyzes traffic for protocol manipulation and various sorts of common attacks. In addition, all
Uniform Resource Locator (URL) traffic must be inspected and users prevented from browsing inappropriate websites. Which of the following solutions should be implemented to enable administrators the capability to analyze traffic, blacklist external sites, and log user traffic for later analysis?

  1. Application-Level Proxy
  2. Intrusion detection system (IDS)
  3. Host-based Firewall
  4. Circuit-Level Proxy

Answer(s): A



What is the PRIMARY consideration when testing industrial control systems (ICS) for security weaknesses?

  1. ICS often run on UNIX operating systems.
  2. ICS often do not have availability requirements.
  3. ICS are often sensitive to unexpected traffic.
  4. ICS are often isolated and difficult to access.

Answer(s): C



The security team plans on using automated account reconciliation in the corporate user access review process. Which of the following must be implemented for the BEST results with fewest errors when running the audit?

  1. Frequent audits
  2. Segregation of Duties (SoD)
  3. Removal of service accounts from review
  4. Clear provisioning policies

Answer(s): D



In the common criteria, which of the following is a formal document that expresses an implementation-independent set of security requirements?

  1. Organizational Security Policy
  2. Security Target (ST)
  3. Protection Profile (PP)
  4. Target of Evaluation (TOE)

Answer(s): C



Viewing page 39 of 98
Viewing questions 191 - 195 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!