CISSP Exam Dumps | An organization operates a legacy Industrial Control System (ICS) to support its core business service,

<< Prev Question Next Question >>

Question 120/217

An organization operates a legacy Industrial Control System (ICS) to support its core business service, which carrot be replaced. Its management MUST be performed remotely through an administrative console software, which in tum depends on an old version of the Java Runtime Environment (JPE) known to be vulnerable to a number of attacks, How is this risk BEST managed?

A. Deploy a restrictive proxy between all clients and the vulnerable management station

B. Convince the management to decommission the ICS and mlg-ate to a modem technology

C. Isolate the full ICS by moving It onto its own network segment

D. Air-gap and harden the host used for management purposes

Question List (217q): 1 commentQuestion 1: A vulnerability test on an Information System (IS) is conduc...; Question 2: Which of the following processes has the PRIMARY purpose of ...; Question 3: An organization is required to comply with the Payment Card ...; Question 4: Which technology is a prerequisite for populating the cloud-...; Question 5: Which of the following is part of a Trusted Platform Module ...; Question 6: Which of the following global privacy legislation principles...; Question 7: Which Radio Frequency Interference (RFI) phenomenon associat...; Question 8: During a Disaster Recovery (DR) assessment, additional cover...; Question 9: Within the company, desktop clients receive Internet Protoco...; Question 10: Which one of the following is an advantage of an effective r...; Question 11: An application team is running tests to ensure that user ent...; Question 12: Which of the following is a benefit in implementing an enter...; Question 13: What are the roles within a scrum methodoligy?...; Question 14: copyright provides protection for which of the following?...; Question 15: Which of the following BEST describes an access control meth...; Question 16: What does a Synchronous (SYN) flood attack do?...; Question 17: The goal of a Business Impact Analysis (BIA) is to determine...; Question 18: A development operations team would like to start building n...; Question 19: Internet protocol security (IPSec), point-to-point tunneling...; Question 20: An organization has outsourced its financial transaction pro...; Question 21: Which of the following is the MOST crucial for a successful ...; Question 22: Which of the following adds end-to-end security inside a Lay...; Question 23: An organization publishes and periodically updates its emplo...; 1 commentQuestion 24: Which of the following four iterative steps are conducted on...; Question 25: Which of the following is the BEST reason to apply patches m...; Question 26: Which of the following attacks is dependent upon the comprom...; Question 27: Which one of the following activities would present a signif...; Question 28: What access control scheme uses fine-grained rules to specif...; Question 29: Which of the following is a characteristic of convert securi...; Question 30: An employee receives a promotion that entities them to acces...; Question 31: Which of the following is the GREATEST security risk associa...; Question 32: Which technique can be used to make an encryption scheme mor...; Question 33: What is the threat modeling order using process for Attack s...; Question 34: Which of the following threats exists with an implementation...; Question 35: Which of the following is the PRIMARY consideration when det...; Question 36: In an organization where Network Access Control (NAC) has be...; Question 37: Which of the following would an internal technical security ...; Question 38: Which of the following are the FIRST two steps to securing e...; Question 39: Mandatory Access Controls (MAC) are based on:...; Question 40: Which of the following is the BEST statement for a professio...; Question 41: Which of the following is an initial consideration when deve...; Question 42: Refer to the information below to answer the question. A lar...; Question 43: A vulnerability assessment report has been submitted to a cl...; Question 44: A control to protect from a Denial-of-Service (DoS) attach h...; Question 45: When selecting a disk encryption technology, which of the fo...; Question 46: An employee of a retail company has been granted an extended...; Question 47: What is a warn site when conducting Business continuity plan...; Question 48: Reciprocal backup site agreements are considered to be...; Question 49: As a best practice, the Security Assessment Report (SAR) sho...; Question 50: Which of the following is a characteristic of a challenge/re...; Question 51: The restoration priorities of a Disaster Recovery Plan (DRP)...; Question 52: Drag and Drop Question Drag the following Security Engineeri...; 1 commentQuestion 53: In which of the following programs is it MOST important to i...; Question 54: Which of the following is the BEST identity-as-a-service (ID...; Question 55: For privacy protected data, which of the following roles has...; Question 56: What is the FIRST step requird in establishing a records ret...; Question 57: A post-implementation review has identified that the Voice O...; Question 58: Which of the following is applicable to a publicly held comp...; Question 59: Which of the following will help prevent improper session ha...; Question 60: Which of the following management process allows ONLY those ...; Question 61: Which step of the Risk Management Framework (RMF) identifies...; Question 62: Which of the following is the PRIMARY risk associated with E...; Question 63: Which of the following was developed to support multiple pro...; Question 64: How is remote authentication Dial-In user service (RADIUS) a...; Question 65: When implementing a secure wireless network, which of the fo...; Question 66: If virus infection is suspected, which of the following is t...; Question 67: The security accreditation task of the System Development Li...; Question 68: A criminal organization is planning an attack on a governmen...; Question 69: From an asset security perspective, what is the BEST counter...; Question 70: Which of the following approaches is the MOST effective way ...; Question 71: As a security manger which of the following is the MOST effe...; Question 72: Which of the following is the MOST important reason for time...; Question 73: How does Encapsulating Security Payload (ESP) in transport m...; Question 74: During a recent assessment an organization has discovered th...; Question 75: Which of the following could be considered the MOST signific...; Question 76: Which of the following is a common characteristic of privacy...; Question 77: Which of the following is an effective control in preventing...; Question 78: Which of the following is the BEST definition of Cross-Site ...; Question 79: Which of the following is MOST important when deploying digi...; Question 80: What is the FIRST action a security professional needs to ta...; Question 81: Which of the following are core categories of malicious atta...; Question 82: A database administrator is asked by a high-ranking member o...; Question 83: Which of the following is used to support the of defense in ...; Question 84: In The Open System Interconnection (OSI) model, which layer ...; Question 85: Which of the following is the FIRST step in the incident res...; Question 86: Which of the following authorization standards is built to h...; Question 87: Which of the following is an advantage of on-premise Credent...; Question 88: What does the Maximum Tolerable Downtime (MTD) determine?...; Question 89: In which identity management process is the subject's identi...; Question 90: An organization regularly conducts its own penetration tests...; Question 91: What is the PRIMARY benefit of analyzing the partition layou...; Question 92: What type of access control determines the authorization to ...; Question 93: As part of the security assessment plan, the security profes...; Question 94: What is the expected outcome of security awareness in suppor...; Question 95: Which of the following is the MOST effective method to mitig...; Question 96: Which of the following techniques BEST prevents buffer overf...; Question 97: Which of the following alarm systems is recommended to detec...; Question 98: A security professional determines that a number of outsourc...; Question 99: An organization is found lacking the ability to properly est...; Question 100: Users require access rights that allow them to view the aver...; Question 101: Which of the following is a PRIMARY benefit of using a forma...; Question 102: Which of the following is the MOST important activity an org...; Question 103: Which of the following is needed to securely distribute symm...; Question 104: Which of the following is MOST effective in detecting inform...; Question 105: When deploying en Intrusion Detection System (IDS) on a high...; Question 106: How does identity as a service (IDaaS) provide an easy mecha...; Question 107: An organization implements a remote access server (RAS), Onc...; 1 commentQuestion 108: Which of the following controls is the most for a system ide...; Question 109: A chemical plan wants to upgrade the Industrial Control Syst...; Question 110: Which is the RECOMMENDED configuration mode for sensors for ...; Question 111: Which of the following will help identify the source interne...; Question 112: A security architect is responsible for the protection of a ...; Question 113: Which of the following is a common measure within a Local Ar...; Question 114: Which of the following is the MOST challenging issue in appr...; Question 115: What is the PRIMARY goal of fault tolerance?...; Question 116: It is MOST important to perform which of the following to mi...; Question 117: What is the MOST effective method for gaining unauthorized a...; Question 118: Although code using a specific program language may not be s...; Question 119: A vulnerability in which of the following components would b...; Question 120: An organization operates a legacy Industrial Control System ...; Question 121: Which of the following MOST applies to session initiation pr...; Question 122: When adopting software as a service (Saas), which security r...; Question 123: Asymmetric algorithms are used for which of the following wh...; Question 124: Which of the following mandates the amount and complexity of...; Question 125: A security professional recommends that a company integrate ...; Question 126: Which of the following is the GREATEST benefit of implementi...; Question 127: Which of the following types of business continuity tests in...; Question 128: A Denial of Service (DoS) attack on a syslog server exploits...; Question 129: Which of the following media sanitization techniques is MOST...; Question 130: Which of the following steps should be performed FIRST when ...; Question 131: Company A is evaluating new software to replace an in-house ...; Question 132: What should be used immediately after a Business Continuity ...; Question 133: Drag and Drop Question Match the types of e-authentication t...; Question 134: What is the MAIN reason for having a developer sign a Non-Di...; Question 135: Which open standard could l large corporation deploy for aut...; Question 136: Which would result in the GREATEST import following a breach...; Question 137: Which of the following has the GREATEST Impact on an organiz...; Question 138: What is the second phase of Public Key Infrastructure (PKI) ...; 1 commentQuestion 139: Which of the following MUST a security policy include to be ...; Question 140: Which of the following entails identification of data and li...; Question 141: What is the MOST effective way to determine a mission critic...; Question 142: What does electronic vaulting accomplish?...; Question 143: When developing a business case for updating a security prog...; Question 144: Which of the following Service Organization Control (SOC) re...; Question 145: A security team member was selected as a member of a Change ...; Question 146: Passive Infrared Sensors (PIR) used in a non-climate control...; Question 147: Which of the following is the MOST common method of memory p...; Question 148: Which of the following is a method used to prevent Structure...; Question 149: Which of the following are important criteria when designing...; Question 150: A company has decided that they need to begin maintaining as...; Question 151: An organization implements a Remote Access Server (RAS). Onc...; Question 152: Which is the MOST critical aspect of computer-generated evid...; Question 153: Which of the following is the weakest form of protection for...; Question 154: What is a consideration when determining the potential impac...; Question 155: Which of the following should be included a hardware retenti...; 1 commentQuestion 156: What is the motivation for use of the Online Certificate Sta...; Question 157: All of the following items should be included in a Business ...; Question 158: Which of the following is a characteristic of the initializa...; Question 159: Which of the following factors contributes to the weakness o...; Question 160: Which of the following can be used to calculate the loss eve...; Question 161: Which of the following is a web application control that sho...; Question 162: The PRIMARY purpose of accreditation is to:...; Question 163: Which of the following is held accountable for the risk to o...; Question 164: What Is the FIRST step for a digital investigator to perform...; Question 165: Which of the following BEST describes how access to a system...; Question 166: Which of the following in the BEST way to reduce the impect ...; Question 167: What is the PRIMARY reason for implementing change managemen...; Question 168: Which of the following is an example of two-factor authentic...; Question 169: An external attacker has compromised an organization's netwo...; Question 170: A security practitioner is tasked with securing the organiza...; Question 171: Which is the second phase of public key Infrastructure (pk1)...; Question 172: Drag and Drop Question Rank the Hypertext Transfer protocol ...; Question 173: Which of the following initiates the systems recovery phase ...; Question 174: At what level of the Open System Interconnection (OSI) model...; Question 175: A Virtual Machine (VM) environment has five guest Operating ...; Question 176: Which of the following should be included in a hardware rete...; Question 177: Functional security testing is MOST critical during which ph...; Question 178: Which of the following is a direct monetary cost of a securi...; Question 179: When conveying the results of a security assessment, which o...; Question 180: Which of the following is the BEST metric to obtain when gai...; Question 181: Digital certificates used in Transport Layer Security (TLS) ...; Question 182: What determines the level of security of a combination lock?...; Question 183: Which of the following actions will reduce risk to a laptop ...; Question 184: When should the software Quality Assurance (QA) team feel co...; Question 185: Which of the following practices provides the development of...; Question 186: Utilizing a public wireless Local Area network (WLAN) to con...; Question 187: What type of wireless network attack BEST describes an Elect...; Question 188: Which of the following is the BEST approach for a forensic e...; Question 189: Which of the following security testing strategies is BEST s...; Question 190: Which of the following features is MOST effective in mitigat...; Question 191: An application developer is deciding on the amount of idle s...; Question 192: Which of the following is an accurate statement when an asse...; Question 193: When conducting a forensic criminal investigation on a compu...; Question 194: Why do certificate Authorities (CA) add value to the securit...; Question 195: When determining who can accept the risk associated with a v...; Question 196: During a fingerprint verification process, which of the foll...; Question 197: Which of the following trust services principles refers to t...; Question 198: Which of the following is used by the Point-to-Point Protoco...; Question 199: How can a security engineer maintain network separation from...; Question 200: A project requires the use of en authentication mechanism wh...; Question 201: An organization wants to enable uses to authenticate across ...; Question 202: Even though a particular digital watermark is difficult to d...; Question 203: Which of the following is critical if an employee is dismiss...; Question 204: Copyright provides protection for which of the following?...; Question 205: Which of the following presents the PRIMARY concern to an or...; Question 206: An advantage of link encryption in a communications network ...; Question 207: Which of the following would MINIMIZE the ability of an atta...; Question 208: When in the Software Development Life Cycle (SDLC) MUST soft...; Question 209: Which of the following is the MOST important security goal w...; Question 210: Which one of the following affects the classification of dat...; Question 211: What is the MAIN purpose for writing planned procedures in t...; Question 212: An organization has doubled in size due to a rapid market sh...; Question 213: Which of the following statements is TRUE regarding state-ba...; Question 214: Which of the following is critical if an empolyee is dismiss...; Question 215: Which of the following is generally indicative of a replay a...; Question 216: Where would an organization typically place an endpoint secu...; 1 commentQuestion 217: An international medical organization with headquarters in t...

Question 120/217

LEAVE A REPLY

Download PDF File