Which security control is most appropriate for protecting a web client application from cross-site scripting (XSS) attacks?

Intrusion prevention system (IPS)

Full disk encryption on the client

Input validation and output encoding

Which storage security control is most effective at protecting data at rest on removable media that may be lost or stolen?

Storage area network (SAN) zoning

Access control lists (ACLs) on the media

Redundant array of independent disks (RAID)

An organization is deploying a new web application that will be accessed by external users. The application is hosted on a server behind a reverse proxy. The security architect needs to protect the application from common web attacks such as SQL injection and cross-site scripting (XSS). Which control should be implemented at the proxy layer?

Enable network address translation (NAT) on the reverse proxy to hide the internal server's IP address.

Configure the reverse proxy to act as a web application firewall (WAF) with rules to inspect and filter HTTP requests.

Deploy a network access control (NAC) solution to ensure only authorized devices can reach the proxy.

Implement a virtual private network (VPN) for all external users to access the application.

What is the primary goal of data loss prevention (DLP) controls?

To provide backup and recovery of data

To prevent unauthorized access to the network

To encrypt all data stored in databases

To detect and block the unauthorized transmission of sensitive data

Information Systems Security Architecture Professional

Domain 3Objective 2

3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 8)

Part of the Infrastructure and System Security Architecture domain, which accounts for 32% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–38 in this domain), expect 7–13 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

14concepts

32%of the exam

Questions 36–40

36foundation · easy
Which data repository security technique replaces sensitive data with realistic but fictitious values, allowing the data to be used for testing or development without exposing the original values?
Select an answer first
37foundation · easy
Which security control is most appropriate for protecting a web client application from cross-site scripting (XSS) attacks?
Select an answer first
38foundation · easy
Which storage security control is most effective at protecting data at rest on removable media that may be lost or stolen?
Select an answer first
39application · medium
An organization is deploying a new web application that will be accessed by external users. The application is hosted on a server behind a reverse proxy. The security architect needs to protect the application from common web attacks such as SQL injection and cross-site scripting (XSS). Which control should be implemented at the proxy layer?
Select an answer first
40foundation · easy
What is the primary goal of data loss prevention (DLP) controls?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 8)

Questions 36–40

Which data repository security technique replaces sensitive data with realistic but fictitious values, allowing the data to be used for testing or development without exposing the original values?

Which security control is most appropriate for protecting a web client application from cross-site scripting (XSS) attacks?

Which storage security control is most effective at protecting data at rest on removable media that may be lost or stolen?

What is the primary goal of data loss prevention (DLP) controls?

Keep studying — Infrastructure and System Security Architecture