QUESTION: 65

International bodies established a regulatory scheme that defines how weapons are exchanged between the signatories. It also addresses cyber weapons, including malicious software, Command and Control (C2) software, and internet surveillance software. This is a description of which of the following?

International Traffic in Arms Regulations (ITAR)
Palermo convention
Wassenaar arrangement
General Data Protection Regulation (GDPR)

Answer(s): C

Show Answer Next Question

QUESTION: 66

An organization has implemented a protection strategy to secure the network from unauthorized external access. The new Chief Information Security Officer
(CISO) wants to increase security by better protecting the network from unauthorized internal access. Which Network Access Control (NAC) capability BEST meets this objective?

Port security
Two-factor authentication (2FA)
Strong passwords
Application firewall

Answer(s): A

Show Answer Next Question

QUESTION: 67

Which section of the assessment report addresses separate vulnerabilities, weaknesses, and gaps?

Findings definition section
Risk review section
Executive summary with full details
Key findings section

Answer(s): D

Show Answer Next Question

QUESTION: 68

Why is data classification control important to an organization?

To enable data discovery
To ensure security controls align with organizational risk appetite
To ensure its integrity, confidentiality and availability
To control data retention in alignment with organizational policies and regulation

Answer(s): B

Show Answer Next Question

Free ISC2 CISSP Exam Braindumps (page: 54)

QUESTION: 65

QUESTION: 66

QUESTION: 67

QUESTION: 68

CISSP Exam Discussions & Posts