CISSP Exam Dumps | Company A is evaluating new software to replace an in-house developed application. During the acquisition

<< Prev Question Next Question >>

Question 131/217

Company A is evaluating new software to replace an in-house developed application. During the acquisition process. Company A specified the security retirement, as well as the functional requirements. Company B responded to the acquisition request with their flagship product that runs on an Operating System (OS) that Company A has never used nor evaluated. The flagship product meets all security -and functional requirements as defined by Company A.
Based upon Company B's response, what step should Company A take?

A. Enter into contract negotiations ensuring Service Level Agreements (SLA) are established to include security patching

B. Conduct a security review of the OS

C. Perform functionality testing

D. Move ahead with the acpjisition process, and purchase the flagship software

Question List (217q): 1 commentQuestion 1: A vulnerability test on an Information System (IS) is conduc...; Question 2: Which of the following processes has the PRIMARY purpose of ...; Question 3: An organization is required to comply with the Payment Card ...; Question 4: Which technology is a prerequisite for populating the cloud-...; Question 5: Which of the following is part of a Trusted Platform Module ...; Question 6: Which of the following global privacy legislation principles...; Question 7: Which Radio Frequency Interference (RFI) phenomenon associat...; Question 8: During a Disaster Recovery (DR) assessment, additional cover...; Question 9: Within the company, desktop clients receive Internet Protoco...; Question 10: Which one of the following is an advantage of an effective r...; Question 11: An application team is running tests to ensure that user ent...; Question 12: Which of the following is a benefit in implementing an enter...; Question 13: What are the roles within a scrum methodoligy?...; Question 14: copyright provides protection for which of the following?...; Question 15: Which of the following BEST describes an access control meth...; Question 16: What does a Synchronous (SYN) flood attack do?...; Question 17: The goal of a Business Impact Analysis (BIA) is to determine...; Question 18: A development operations team would like to start building n...; Question 19: Internet protocol security (IPSec), point-to-point tunneling...; Question 20: An organization has outsourced its financial transaction pro...; Question 21: Which of the following is the MOST crucial for a successful ...; Question 22: Which of the following adds end-to-end security inside a Lay...; Question 23: An organization publishes and periodically updates its emplo...; 1 commentQuestion 24: Which of the following four iterative steps are conducted on...; Question 25: Which of the following is the BEST reason to apply patches m...; Question 26: Which of the following attacks is dependent upon the comprom...; Question 27: Which one of the following activities would present a signif...; Question 28: What access control scheme uses fine-grained rules to specif...; Question 29: Which of the following is a characteristic of convert securi...; Question 30: An employee receives a promotion that entities them to acces...; Question 31: Which of the following is the GREATEST security risk associa...; Question 32: Which technique can be used to make an encryption scheme mor...; Question 33: What is the threat modeling order using process for Attack s...; Question 34: Which of the following threats exists with an implementation...; Question 35: Which of the following is the PRIMARY consideration when det...; Question 36: In an organization where Network Access Control (NAC) has be...; Question 37: Which of the following would an internal technical security ...; Question 38: Which of the following are the FIRST two steps to securing e...; Question 39: Mandatory Access Controls (MAC) are based on:...; Question 40: Which of the following is the BEST statement for a professio...; Question 41: Which of the following is an initial consideration when deve...; Question 42: Refer to the information below to answer the question. A lar...; Question 43: A vulnerability assessment report has been submitted to a cl...; Question 44: A control to protect from a Denial-of-Service (DoS) attach h...; Question 45: When selecting a disk encryption technology, which of the fo...; Question 46: An employee of a retail company has been granted an extended...; Question 47: What is a warn site when conducting Business continuity plan...; Question 48: Reciprocal backup site agreements are considered to be...; Question 49: As a best practice, the Security Assessment Report (SAR) sho...; Question 50: Which of the following is a characteristic of a challenge/re...; Question 51: The restoration priorities of a Disaster Recovery Plan (DRP)...; Question 52: Drag and Drop Question Drag the following Security Engineeri...; 1 commentQuestion 53: In which of the following programs is it MOST important to i...; Question 54: Which of the following is the BEST identity-as-a-service (ID...; Question 55: For privacy protected data, which of the following roles has...; Question 56: What is the FIRST step requird in establishing a records ret...; Question 57: A post-implementation review has identified that the Voice O...; Question 58: Which of the following is applicable to a publicly held comp...; Question 59: Which of the following will help prevent improper session ha...; Question 60: Which of the following management process allows ONLY those ...; Question 61: Which step of the Risk Management Framework (RMF) identifies...; Question 62: Which of the following is the PRIMARY risk associated with E...; Question 63: Which of the following was developed to support multiple pro...; Question 64: How is remote authentication Dial-In user service (RADIUS) a...; Question 65: When implementing a secure wireless network, which of the fo...; Question 66: If virus infection is suspected, which of the following is t...; Question 67: The security accreditation task of the System Development Li...; Question 68: A criminal organization is planning an attack on a governmen...; Question 69: From an asset security perspective, what is the BEST counter...; Question 70: Which of the following approaches is the MOST effective way ...; Question 71: As a security manger which of the following is the MOST effe...; Question 72: Which of the following is the MOST important reason for time...; Question 73: How does Encapsulating Security Payload (ESP) in transport m...; Question 74: During a recent assessment an organization has discovered th...; Question 75: Which of the following could be considered the MOST signific...; Question 76: Which of the following is a common characteristic of privacy...; Question 77: Which of the following is an effective control in preventing...; Question 78: Which of the following is the BEST definition of Cross-Site ...; Question 79: Which of the following is MOST important when deploying digi...; Question 80: What is the FIRST action a security professional needs to ta...; Question 81: Which of the following are core categories of malicious atta...; Question 82: A database administrator is asked by a high-ranking member o...; Question 83: Which of the following is used to support the of defense in ...; Question 84: In The Open System Interconnection (OSI) model, which layer ...; Question 85: Which of the following is the FIRST step in the incident res...; Question 86: Which of the following authorization standards is built to h...; Question 87: Which of the following is an advantage of on-premise Credent...; Question 88: What does the Maximum Tolerable Downtime (MTD) determine?...; Question 89: In which identity management process is the subject's identi...; Question 90: An organization regularly conducts its own penetration tests...; Question 91: What is the PRIMARY benefit of analyzing the partition layou...; Question 92: What type of access control determines the authorization to ...; Question 93: As part of the security assessment plan, the security profes...; Question 94: What is the expected outcome of security awareness in suppor...; Question 95: Which of the following is the MOST effective method to mitig...; Question 96: Which of the following techniques BEST prevents buffer overf...; Question 97: Which of the following alarm systems is recommended to detec...; Question 98: A security professional determines that a number of outsourc...; Question 99: An organization is found lacking the ability to properly est...; Question 100: Users require access rights that allow them to view the aver...; Question 101: Which of the following is a PRIMARY benefit of using a forma...; Question 102: Which of the following is the MOST important activity an org...; Question 103: Which of the following is needed to securely distribute symm...; Question 104: Which of the following is MOST effective in detecting inform...; Question 105: When deploying en Intrusion Detection System (IDS) on a high...; Question 106: How does identity as a service (IDaaS) provide an easy mecha...; Question 107: An organization implements a remote access server (RAS), Onc...; 1 commentQuestion 108: Which of the following controls is the most for a system ide...; Question 109: A chemical plan wants to upgrade the Industrial Control Syst...; Question 110: Which is the RECOMMENDED configuration mode for sensors for ...; Question 111: Which of the following will help identify the source interne...; Question 112: A security architect is responsible for the protection of a ...; Question 113: Which of the following is a common measure within a Local Ar...; Question 114: Which of the following is the MOST challenging issue in appr...; Question 115: What is the PRIMARY goal of fault tolerance?...; Question 116: It is MOST important to perform which of the following to mi...; Question 117: What is the MOST effective method for gaining unauthorized a...; Question 118: Although code using a specific program language may not be s...; Question 119: A vulnerability in which of the following components would b...; Question 120: An organization operates a legacy Industrial Control System ...; Question 121: Which of the following MOST applies to session initiation pr...; Question 122: When adopting software as a service (Saas), which security r...; Question 123: Asymmetric algorithms are used for which of the following wh...; Question 124: Which of the following mandates the amount and complexity of...; Question 125: A security professional recommends that a company integrate ...; Question 126: Which of the following is the GREATEST benefit of implementi...; Question 127: Which of the following types of business continuity tests in...; Question 128: A Denial of Service (DoS) attack on a syslog server exploits...; Question 129: Which of the following media sanitization techniques is MOST...; Question 130: Which of the following steps should be performed FIRST when ...; Question 131: Company A is evaluating new software to replace an in-house ...; Question 132: What should be used immediately after a Business Continuity ...; Question 133: Drag and Drop Question Match the types of e-authentication t...; Question 134: What is the MAIN reason for having a developer sign a Non-Di...; Question 135: Which open standard could l large corporation deploy for aut...; Question 136: Which would result in the GREATEST import following a breach...; Question 137: Which of the following has the GREATEST Impact on an organiz...; Question 138: What is the second phase of Public Key Infrastructure (PKI) ...; 1 commentQuestion 139: Which of the following MUST a security policy include to be ...; Question 140: Which of the following entails identification of data and li...; Question 141: What is the MOST effective way to determine a mission critic...; Question 142: What does electronic vaulting accomplish?...; Question 143: When developing a business case for updating a security prog...; Question 144: Which of the following Service Organization Control (SOC) re...; Question 145: A security team member was selected as a member of a Change ...; Question 146: Passive Infrared Sensors (PIR) used in a non-climate control...; Question 147: Which of the following is the MOST common method of memory p...; Question 148: Which of the following is a method used to prevent Structure...; Question 149: Which of the following are important criteria when designing...; Question 150: A company has decided that they need to begin maintaining as...; Question 151: An organization implements a Remote Access Server (RAS). Onc...; Question 152: Which is the MOST critical aspect of computer-generated evid...; Question 153: Which of the following is the weakest form of protection for...; Question 154: What is a consideration when determining the potential impac...; Question 155: Which of the following should be included a hardware retenti...; 1 commentQuestion 156: What is the motivation for use of the Online Certificate Sta...; Question 157: All of the following items should be included in a Business ...; Question 158: Which of the following is a characteristic of the initializa...; Question 159: Which of the following factors contributes to the weakness o...; Question 160: Which of the following can be used to calculate the loss eve...; Question 161: Which of the following is a web application control that sho...; Question 162: The PRIMARY purpose of accreditation is to:...; Question 163: Which of the following is held accountable for the risk to o...; Question 164: What Is the FIRST step for a digital investigator to perform...; Question 165: Which of the following BEST describes how access to a system...; Question 166: Which of the following in the BEST way to reduce the impect ...; Question 167: What is the PRIMARY reason for implementing change managemen...; Question 168: Which of the following is an example of two-factor authentic...; Question 169: An external attacker has compromised an organization's netwo...; Question 170: A security practitioner is tasked with securing the organiza...; Question 171: Which is the second phase of public key Infrastructure (pk1)...; Question 172: Drag and Drop Question Rank the Hypertext Transfer protocol ...; Question 173: Which of the following initiates the systems recovery phase ...; Question 174: At what level of the Open System Interconnection (OSI) model...; Question 175: A Virtual Machine (VM) environment has five guest Operating ...; Question 176: Which of the following should be included in a hardware rete...; Question 177: Functional security testing is MOST critical during which ph...; Question 178: Which of the following is a direct monetary cost of a securi...; Question 179: When conveying the results of a security assessment, which o...; Question 180: Which of the following is the BEST metric to obtain when gai...; Question 181: Digital certificates used in Transport Layer Security (TLS) ...; Question 182: What determines the level of security of a combination lock?...; Question 183: Which of the following actions will reduce risk to a laptop ...; Question 184: When should the software Quality Assurance (QA) team feel co...; Question 185: Which of the following practices provides the development of...; Question 186: Utilizing a public wireless Local Area network (WLAN) to con...; Question 187: What type of wireless network attack BEST describes an Elect...; Question 188: Which of the following is the BEST approach for a forensic e...; Question 189: Which of the following security testing strategies is BEST s...; Question 190: Which of the following features is MOST effective in mitigat...; Question 191: An application developer is deciding on the amount of idle s...; Question 192: Which of the following is an accurate statement when an asse...; Question 193: When conducting a forensic criminal investigation on a compu...; Question 194: Why do certificate Authorities (CA) add value to the securit...; Question 195: When determining who can accept the risk associated with a v...; Question 196: During a fingerprint verification process, which of the foll...; Question 197: Which of the following trust services principles refers to t...; Question 198: Which of the following is used by the Point-to-Point Protoco...; Question 199: How can a security engineer maintain network separation from...; Question 200: A project requires the use of en authentication mechanism wh...; Question 201: An organization wants to enable uses to authenticate across ...; Question 202: Even though a particular digital watermark is difficult to d...; Question 203: Which of the following is critical if an employee is dismiss...; Question 204: Copyright provides protection for which of the following?...; Question 205: Which of the following presents the PRIMARY concern to an or...; Question 206: An advantage of link encryption in a communications network ...; Question 207: Which of the following would MINIMIZE the ability of an atta...; Question 208: When in the Software Development Life Cycle (SDLC) MUST soft...; Question 209: Which of the following is the MOST important security goal w...; Question 210: Which one of the following affects the classification of dat...; Question 211: What is the MAIN purpose for writing planned procedures in t...; Question 212: An organization has doubled in size due to a rapid market sh...; Question 213: Which of the following statements is TRUE regarding state-ba...; Question 214: Which of the following is critical if an empolyee is dismiss...; Question 215: Which of the following is generally indicative of a replay a...; Question 216: Where would an organization typically place an endpoint secu...; 1 commentQuestion 217: An international medical organization with headquarters in t...

Question 131/217

LEAVE A REPLY

Download PDF File