CISSP Exam Questions

In fault-tolerant systems, what do rollback capabilities permit?

How does identity as a service (IDaaS) provide an easy mechanism for integrating identity service into individual applications with minimal development effort?

A security practitioner has been tasked with establishing organizational asset handling procedures. What should be considered that would have the GRFATEST impact to the development...

From an asset security perspective, what is the BEST countermeasure to prevent data theft due to data remanence when a sensitive data storage media is no longer needed?

A project requires the use of en authentication mechanism where playback must be protected and plaintext secret must be used. Which of the following should be used?

Which of the following threats exists with an implementation of digital signatures?

What should be used immediately after a Business Continuity Plan (BCP) has been invoked?

When deploying en Intrusion Detection System (IDS) on a high-volume network, the need to distribute the load across multiple sensors would create which technical problem?

How can a security engineer maintain network separation from a secure environment while allowing remote users to work in the secure environment?

Which of the following is the MOST important consideration that must be taken into account when deploying an enterprise patching solution that includes mobile devices?

Which of the following is the weakest form of protection for an application that handles Personally Identifiable Information (PII)?

Which is the MOST effective countermeasure to prevent electromagnetic emanations on unshielded data cable?

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

A criminal organization is planning an attack on a government network. Which of the following is the MOST severe attack to the network availability?

Limiting the processor, memory, and Input/output (I/O) capabilities of mobile code is known as

Which of the following security testing strategies is BEST suited for companies with low to moderate security maturity?

Which of the following are core categories of malicious attack against Internet of Things (IOT) devices?

Which of the following entails identification of data end links to business processes, applications, and data stores as well as assignment of ownership responsibilities?

Which of the following is critical if an employee is dismissed due to violation of an organization's Acceptable Use Policy (ALP)?

Which of the following is the PRIMARY security consideration for how an organization should handle Information Technology (IT) assets?

In a dispersed network that lacks central control, which of the following is die PRIMARY course of action to mitigate exposure?

What are the roles within a scrum methodology?

When conducting a forensic criminal investigation on a computer had drive, what should be dene PRIOR to analysis?

Which of the following initiates the systems recovery phase of a disaster recovery plan?

Which type of fire alarm system sensor is intended to detect fire at its earliest stage?

An organization implements a Remote Access Server (RAS). Once users correct to the server, digital certificates are used to authenticate their identity. What type of Extensible Aut...

Which of the following MUST a security professional do in order to quantify the value of a security program to organization management?

A client has reviewed a vulnerability assessment report and has stated it is Inaccurate. The client states that the vulnerabilities listed are not valid because the host's Operatin...

Which of the following objects should be removed FIRST prior to uploading code to public code repositories?

Which of the following is a common measure within a Local Area Network (LAN) to provide en additional level of security through segmentation?

What Is the FIRST step for a digital investigator to perform when using best practices to collect digital evidence from a potential crime scene?

How can an attacker exploit overflow to execute arbitrary code?

Which of the following is TRUE regarding equivalence class testing?

Which of the following is the BEST way to protect against structured Query language (SQL) injection?

Which of the following BEST describes the responsibilities of data owner?

Which area of embedded devices are most commonly attacked?

If virus infection is suspected, which of the following is the FIRST step for the user to take?

Which of the following MOST applies to session initiation protocal (SIP) security?

Which layer of the Open systems Interconnection (OSI) model is being targeted in the event of a Synchronization (SYN) flood attack?

What is the document that describes the measures that have been implemented or planned to correct any deficiencies noted during the assessment of the security controls?

When dealing with shared, privilaged accounts, especially those for emergencies, what is the BEST way to assure non-repudiation of logs?

Which of the following actions MUST be performed when using secure multipurpose internet mail Extension (S/MIME) before sending an encrypted message to a recipient?

Which type of test suite should be run for fast feedback during application develoment?

What are the roles within a scrum methodoligy?

What is the FIRST step required in establishing a records retention program?

Which of the following was developed to support multiple protocols as well as provide as well as provide login, password, and error correction capabilities?

In organization discovers that its secure file transfer protocol (SFTP) server has been accessed by an unauthorized person to download an unreleased game. A recent security audit f...

If a content management system (CMC) is implemented, which one of the following would occur?

Which of the following is the BEST identity-as-a-service (IDaaS) solution for validating users?

Which layer handle packet fragmentation and reassembly in the Open system interconnection (OSI) Reference model?