ISC Certified Information Systems Security Professional (CISSP) - CISSP Exam Practice Test

A. The odds of a flood at this level are 1 in 100 in any given year.

B. The last flood of any kind to hit the area was more than 100 years ago.

C. The area is expected to be safe from flooding for at least 100 years.

D. The odds are that the next significant flood will hit within the next 100 years.

A. Encrypting data using a symmetric algorithm exclusively

B. A technique used exclusively for managing DNS records

C. Creating an immutable, verifiable record of data's origin, custody, and any modifications over time, helping establish trust and traceability, particularly in multi-party or supply chain data-sharing scenarios

D. A method for compressing large datasets for archival purposes

A. To verify that only employees have access to the facility.

B. To identify present hazards requiring remediation.

C. To monitor staff movement throughout the facility.

D. To provide a safe environment for employees.

A. Convince the management to decommission the ICS and mitigate to a modem technology

B. Isolate the full ICS by moving It onto its own network segment

C. Air-gap and harden the host used for management purposes

D. Deploy a restrictive proxy between all clients and the vulnerable management station

A. Single sign-on (SSO)

B. Multi-factor authentication (MFA)

C. Federated identity management (FIM)

D. Remote Desktop Protocol (RDP)

A. Outlining all actions taken during the investigation

B. Maintaining the chain of custody

C. Complying with the organization's security policy

D. Capturing an image of the system

A. A race condition vulnerability where a resource's state changes between the time it is checked and the time it is used, potentially allowing unauthorized access or unintended behavior

B. A vulnerability caused by using outdated encryption algorithms

C. A vulnerability caused by insufficient password complexity

D. A vulnerability that only affects mobile applications

A. Mean time to repair (MTTR)

B. Financial penalties in case of disruption

C. Quality of Service (QoS) between applications

D. Availability of network services

A. A financial invoice listing the cost of software licenses

B. A document listing the hardware specifications required to run an application

C. A record of all user accounts with access to a software system

D. A formal, structured inventory of all components, libraries, and dependencies used to build a piece of software, enabling better visibility into potential vulnerabilities and supply chain risk

A. defense in depth.

B. non-repudiation.

C. data availability.

D. data integrity.

A. It has many worksheets and practices to implement.

B. It aims to calculate the risk of published vulnerabilities.

C. It requires a robust risk management framework to be put in place.

D. It has normalized severity ratings.

A. Submit the request using company official channels to ensure the policy is okay to distribute.

B. Email the policy to the colleague as they were already part of the organization and familiar with it.

C. Access the policy on a company-issued device and let the former colleague view the screen.

D. Do not acknowledge receiving the request from the former colleague and ignore them.

A. to correspond with terminations

B. to correspond with staff promotions

C. annually

D. continually

A. Calculate the value of assets being accredited.

B. Create a list to include in the Security Assessment and Authorization package.

C. Identify obsolete hardware and software.

D. Define the boundaries of the information system.