Get ISC2 CISSP Exam Practice Questions - Real and Updated

Answer : C

The action that must be performed when using Secure Multipurpose Internet Mail Extension (S/MIME) before sending an encrypted message to a recipient is to obtain the recipient's digital certificate. S/MIME is a standard that enables the secure transmission of email messages over the Internet, using encryption and digital signatures. To encrypt a message using S/MIME, the sender needs to obtain the recipient's digital certificate, which contains the recipient's public key and identity information. The sender can then use the recipient's public key to encrypt the message, ensuring that only the recipient can decrypt it with their private key. The recipient's digital certificate can be obtained from a trusted source, such as a certificate authority, a directory service, or a previous message from the recipient. Obtaining the recipient's digital certificate is a prerequisite for sending an encrypted message using S/MIME. Reference: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 3: Security Engineering, page 132; [Official (ISC)2 CISSP CBK Reference, Fifth Edition, Chapter 3: Security Engineering, page 194]

Answer : C

Monitoring and reviewing privileged sessions helps in applying the principle of least privilege by ensuring that users with higher privileges are only accessing resources necessary for their roles, thus reducing the risk of misuse or exploitation.Reference:CISSP Official (ISC)2 Practice Tests, Chapter 5, page 138;Official (ISC)2 CISSP CBK Reference, Fifth Edition, Chapter 5, page 249

Answer : D

The best description of the purpose of software forensics is to determine the author and behavior of the code. Software forensics is the application of forensic science to software, which involves the collection, analysis, and presentation of software-related evidence. Software forensics can be used for various purposes, such as investigating software crimes, disputes, or incidents, identifying software vulnerabilities or defects, verifying software compliance or quality, or recovering software data or functionality. However, the primary purpose of software forensics is to determine the author and behavior of the code, which can help to establish the origin, ownership, responsibility, or intention of the software. For example, software forensics can help to identify the creator, distributor, or user of a malware, a pirated software, or a stolen software. Software forensics can also help to understand the functionality, logic, or purpose of a software, such as what it does, how it works, or what it affects. To determine the author and behavior of the code, software forensics can use various techniques, such as code analysis, code comparison, code reverse engineering, code fingerprinting, or code attribution. To perform cyclic redundancy check (CRC) verification and detect changed applications, to review program code to determine the existence of backdoors, or to analyze possible malicious intent of malware are not the best descriptions of the purpose of software forensics. These are some of the possible applications or outcomes of software forensics, but they are not the main or overarching purpose of software forensics. Moreover, these are not exclusive to software forensics, as they can also be performed by other software-related disciplines, such as software testing, software security, or software engineering.Reference:Official (ISC)2 CISSP CBK Reference, Fifth Edition, Domain 8, Software Development Security, page 855.CISSP All-in-One Exam Guide, Eighth Edition, Chapter 8, Software Development Security, page 794.

Answer : D

S/MIME is a standard for secure email that uses asymmetric encryption and digital signatures. S/MIME supports several algorithms for digital signatures, but the most common ones are RSA and DSA. RSA is a more versatile algorithm that can be used for both encryption and digital signatures, while DSA is designed only for digital signatures. RSA is also more widely supported by email clients and servers than DSA. Therefore, a security professional should ensure that clients support RSA as a secondary algorithm for digital signatures when S/MIME is used, in case the primary algorithm is not available or compatible.Reference:CISSP All-in-One Exam Guide, Eighth Edition, Chapter 5: Cryptography and Symmetric Key Algorithms, page 245.CISSP Official (ISC)2 Practice Tests, Third Edition, Domain 3: Security Architecture and Engineering, Question 13.

Answer : D

A security practitioner who has been tasked with establishing organizational asset handling procedures should consider the information classification scheme as the factor that would have the greatest impact to the development of these procedures. An information classification scheme is a set of policies and rules that define how the organization's information assets are categorized and labeled according to their sensitivity, value, and criticality. The information classification scheme also determines the appropriate security controls, access rights, retention periods, and disposal methods for each category of information. By applying an information classification scheme, the organization can ensure that its asset handling procedures are consistent, effective, and aligned with its security objectives and compliance requirements. Reference: CISSP domain 2: Asset security, 2024 CISSP Detailed Content Outline With Weights Final (Public Use Only), CISSP 2021: Asset Classification & Lifecycle