ISC Practice Test 9 — 10 Questions

Question 1

You are verifying the security configuration of an Amazon S3 bucket. Which S3 feature must be enabled to ensure that object deletions are reversible in case of accidental or malicious data loss?

Accepted Answer

S3 Versioning. S3 Versioning allows for the retrieval of previous versions of an object, even after deletion.

Answer

S3 Object Lock

Answer

S3 Block Public Access

Answer

S3 Lifecycle Policies

Question 2

Which THREE of the following are valid 'Authentication' factors?

Accepted Answer

Something you are (e.g., fingerprint). Authentication factors fall into categories: something you know, something you have, and something you are.

Answer

Where you sit in the office

Answer

Your mood at the time of login

Question 3

During a system migration, you need to ensure integrity of transferred data. What is the best cryptographic method?

Accepted Answer

Use HMAC for the data stream.. Using HMAC (Hash-based Message Authentication Code) with a shared key ensures both integrity and authenticity of the data stream.

Answer

Use TLS 1.0.

Answer

Use a simple CRC32 checksum.

Answer

Use base64 encoding.

Question 4

Which TWO items should be included in a system's security architecture documentation?

Accepted Answer

Network topology diagrams.. Network diagrams and data flow diagrams are essential for understanding the security posture of a system.

Answer

Marketing brochures for the software.

Answer

Office building blueprints.

Answer

Employee vacation schedules.

Question 5

A security engineer is validating the implementation of a TLS 1.3 configuration on an Nginx server. Which configuration directive must be verified to ensure only secure ciphers are used?

Accepted Answer

ssl_protocols TLSv1.3;. The 'ssl_protocols' and 'ssl_ciphers' directives are critical for TLS implementation verification.

Answer

ssl_session_cache shared:SSL:10m;

Answer

ssl_prefer_server_ciphers on;

Answer

ssl_verify_client on;

Question 6

You are verifying the implementation of a microsegmentation policy in a software-defined network (SDN). Which approach is most effective for validating that isolation is enforced?

Accepted Answer

Perform ping tests between VMs in different security zones.. Validating microsegmentation requires testing lateral movement between segments that should be isolated.

Answer

Inspect the physical switch port configuration.

Answer

Review the cloud provider's SLA.

Answer

Check the DNS records for the servers.

Question 7

When designing a system for 'High Integrity' (using the Biba model), which THREE rules must be enforced?

Accepted Answer

Simple Integrity Axiom (No Read Down). Biba is the dual of Bell-LaPadula: No Read Down (integrity) and No Write Up (integrity).

Answer

No Write Down

Answer

No Read Up

Question 8

What is the primary risk of a 'Privileged User' who lacks proper oversight?

Accepted Answer

They can bypass security controls and abuse access. Privileged users have significant access, so without oversight (separation of duties/auditing), they can perform malicious actions or make catastrophic errors.

Answer

They will slow down system performance

Answer

They cannot do their job

Answer

They will always be hackers

Question 9

An ISSEP is configuring an AWS S3 bucket. What policy setting best prevents public access while allowing access from a specific VPC?

Accepted Answer

Bucket Policy with 'Condition' element matching 'aws:SourceVpc'.. Using an S3 Bucket Policy with a 'Condition' block that checks the 'aws:SourceVpc' key is the standard way to restrict access to a private network.

Answer

Enable 'Block Public Access' and ACLs.

Answer

Create an IAM role for every user in the VPC.

Answer

Use an S3 Pre-signed URL.

Question 10

Which THREE elements are required in a high-security access control policy?

Accepted Answer

Authentication and authorization conditions.. Access control policies must define roles (who), resources (what), and the conditions (how/when) under which access is granted.

Answer

Employee home addresses.

Answer

Office kitchen menu.