CISSP Practice Test practice questions, page 6 of 20, with answer review and explanations.
Question 26
When resolving ethical conflicts, the information security professional MUST consider many factors. In what order should the considerations be prioritized?
Public safety, duties to individuals, duties to the profession, and duties to principals
Public safety, duties to principals, duties to the profession, and duties to individuals
Public safety, duties to principals, duties to individuals, and duties to the profession
Public safety, duties to the profession, duties to principals, and duties to individuals
Question 27
Which service management process BEST helps information technology (IT) organizations with reducing cost, mitigating risk, and improving customer service?
Kanban
Lean Six Sigma
Information Technology Service Management (ITSM)
Information Technology Infrastructure Library (ITIL)
Question 28
A company is attempting to enhance the security of its user authentication processes. After evaluating several options, the company has decided to utilize Identity as a Service (IDaaS). Which of the following factors leads the company to choose an IDaaS as their solution?
In-house team lacks resources to support an on-premise solution.
Third-party solutions are inherently more secure.
Third-party solutions are known for transferring the risk to the vendor.
In-house development provides more control.
Question 29
An organization recently suffered from a web-application attack that resulted in stolen user session cookie information. The attacker was able to obtain the information when a user's browser executed a script upon visiting a compromised website. What type of attack MOST likely occurred?
SQL injection (SQLi)
Extensible Markup Language (XML) external entities
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Question 30
An attack utilizing social engineering and a malicious Uniform Resource Locator (URL) link to take advantage of a victim's existing browser session with a web application is an example of which of the following types of attack?