What is the primary security function of a forward proxy server?

To protect a web server from inbound attacks

To filter and control outbound traffic from internal users to the internet

To encrypt data at rest on the server

To provide load balancing for internal applications

Which content monitoring technique is used to inspect email messages for sensitive data patterns, such as credit card numbers, and block them if they violate policy?

Data loss prevention (DLP) scanning

Sender authentication (SPF/DKIM)

What is the primary purpose of using an out-of-band communication channel during incident response?

To ensure that communications remain available even if the primary network is compromised

To increase the speed of data transfer during an incident

To provide a secure channel for normal business communications

To replace the need for incident response plans

A company's storage administrator is responsible for a storage area network (SAN) that hosts critical virtual machines. The security architect is implementing a new backup strategy. The requirement is to protect against ransomware that could encrypt the primary storage and the backup copies. Which backup strategy is most resilient to this threat?

Replicate the SAN to a secondary SAN at a different site using synchronous replication.

Store backups on immutable storage, such as write-once-read-many (WORM) media or object storage with object lock, and isolate the backup network from the primary storage network.

Use a tape backup system and store the tapes in a fireproof safe on-site.

Perform daily backups to a separate LUN on the same SAN and retain them for 30 days.

What is the primary purpose of data redaction in a data repository?

To create a backup copy of the data

To obscure or remove sensitive data from documents or query results

To permanently delete sensitive data from the repository

To encrypt data at rest in the repository

Information Systems Security Architecture Professional

Domain 3Objective 2

3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 7)

Part of the Infrastructure and System Security Architecture domain, which accounts for 32% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–38 in this domain), expect 7–13 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

14concepts

32%of the exam

Questions 31–35

31foundation · easy
What is the primary security function of a forward proxy server?
Select an answer first
32foundation · easy
Which content monitoring technique is used to inspect email messages for sensitive data patterns, such as credit card numbers, and block them if they violate policy?
Select an answer first
33foundation · easy
What is the primary purpose of using an out-of-band communication channel during incident response?
Select an answer first
34expert · hard
A company's storage administrator is responsible for a storage area network (SAN) that hosts critical virtual machines. The security architect is implementing a new backup strategy. The requirement is to protect against ransomware that could encrypt the primary storage and the backup copies. Which backup strategy is most resilient to this threat?
Select an answer first
35foundation · easy
What is the primary purpose of data redaction in a data repository?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.