CISSP FINAL REVIEW Q&A 2024

What are valid SQL Commands - Answer-SELECT, DELETE, GRANT, UPDATE, INSERT What are applications that use UDP - Answer-NFS, TFTP, SNMP What is a method to ensure the entire transaction (db) is executed to ensure integrity - Answer-Two-phase commit What is the order of volatility in collecting evidence - Answer-1. Memory 2. Network Process 3. System Process 4. Hard Drives 5. Backup Tapes 6. DVDs What is the best choice to ensure certain messages from the web are transmitted securely - Answer-S-HTTP What is used to secure entire portions of a website - Answer-HTTPS What is a technology to secure credit card transactions - Answer-SET What is the process for change control - Answer-1. Make the request 2. Analyze it 3. Record it 4. Submit it for approval 5. Make the change 6. Submit results What is a cloud service to perform user account and password management - Answer-Identity as a Service (IDaas) What is a cloud service to perform development, execution and governance of integration flows - Answer-Integration as a Service (IPaas) What is a cloud service that allows users to develop, run and manage web apps - Answer-Platform as a Service (PaaS) What is the facility feature that poses the most security risk to facility infrastructure - Answer-Drop Ceilings Which gap analysis identifies and matches the data content required by HIPAA - Answer-Gap Analysis for Transactions