ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition

Chapter 6Security Assessment and Testing (Domain 6)

SUBDOMAINS

• 6.1 Design and validate assessment, test, and audit strategies
• 6.2 Conduct security controls testing
• 6.3 Collect security process data (e.g., technical, and administrative)
• 6.4 Analyze test output and generate report
• 6.5 Conduct or facilitate security audits

1. During a port scan, Susan discovers a system running services on TCP and UDP 137–139 and TCP 445, as well as TCP 1433. What type of system is she likely to find if she connects to the machine?
   1. A Linux email server
   2. A Windows SQL server
   3. A Linux file server
   4. A Windows workstation
2. Which of the following is a method used to automatically design new software tests and to ensure the quality of tests?
   1. Code auditing
   2. Static ...