Exam style questions across every CISSP domain
Last Update 3 days ago
Total Questions : 1486
Start with our free CISSP practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real ISC 2 Credentials exam. Each CISSP exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your ISC weak domains, see where you're losing marks, and build a focused study plan in minutes.
Determining outage costs caused by a disaster can BEST be measured by the
How does a Host Based Intrusion Detection System (HIDS) identify a potential attack?
A network scan found 50% of the systems with one or more critical vulnerabilities. Which of the following represents the BEST action?
Which Web Services Security (WS-Security) specification handles the management of security tokens and the underlying policies for granting access? Click on the correct specification in the image below.
Which of the following is the MOST effective method of mitigating data theft from an active user workstation?
Which of the following BEST describes an access control method utilizing cryptographic keys derived from a smart card private key that is embedded within mobile devices?
Users require access rights that allow them to view the average salary of groups of employees. Which control would prevent the users from obtaining an individual employee’s salary?
A manufacturing organization wants to establish a Federated Identity Management (FIM) system with its 20 different supplier companies. Which of the following is the BEST solution for the manufacturing organization?
What is the BEST approach for controlling access to highly sensitive information when employees have the same level of security clearance?
When assessing an organization’s security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002, when can management responsibilities be defined?
Which of the following types of technologies would be the MOST cost-effective method to provide a reactive control for protecting personnel in public areas?
A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?
An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?
All of the following items should be included in a Business Impact Analysis (BIA) questionnaire EXCEPT questions that
Intellectual property rights are PRIMARY concerned with which of the following?
