ISC CISSP Practice Exams
Last updated on Oct 22,2026- Exam Code: CISSP
- Exam Name: Certified Information Systems Security Professional
- Certification Provider: ISC
- Latest update: Oct 22,2026
What is the second phase of Public Key Infrastructure (PKI) key/certificate life-cycle management?
- A . Implementation Phase
- B . Initialization Phase
- C . Cancellation Phase
- D . Issued Phase
Which of the following is the FIRST step in the incident response process?
- A . Determine the cause of the incident
- B . Disconnect the system involved from the network
- C . Isolate and contain the system involved
- D . Investigate all symptoms to confirm the incident
What is the BEST approach for controlling access to highly sensitive information when employees have the same level of security clearance?
- A . Audit logs
- B . Role-Based Access Control (RBAC)
- C . Two-factor authentication
- D . Application of least privilege
The configuration management and control task of the certification and accreditation process is incorporated in which phase of the System Development Life Cycle (SDLC)?
- A . System acquisition and development
- B . System operations and maintenance
- C . System initiation
- D . System implementation
Which of the following actions will reduce risk to a laptop before traveling to a high risk area?
- A . Examine the device for physical tampering
- B . Implement more stringent baseline configurations
- C . Purge or re-image the hard disk drive
- D . Change access codes
Who in the organization is accountable for classification of data information assets?
- A . Data owner
- B . Data architect
- C . Chief Information Security Officer (CISO)
- D . Chief Information Officer (CIO)
Which of the following types of technologies would be the MOST cost-effective method to provide a reactive control for protecting personnel in public areas?
- A . Install mantraps at the building entrances
- B . Enclose the personnel entry area with polycarbonate plastic
- C . Supply a duress alarm for personnel exposed to the public
- D . Hire a guard to protect the public area
Which of the following factors contributes to the weakness of Wired Equivalent Privacy (WEP) protocol?
- A . WEP uses a small range Initialization Vector (IV)
- B . WEP uses Message Digest 5 (MD5)
- C . WEP uses Diffie-Hellman
- D . WEP does not use any Initialization Vector (IV)
A vulnerability test on an Information System (IS) is conducted to
- A . exploit security weaknesses in the IS.
- B . measure system performance on systems with weak security controls.
- C . evaluate the effectiveness of security controls.
- D . prepare for Disaster Recovery (DR) planning.
An input validation and exception handling vulnerability has been discovered on a critical web-based system .
Which of the following is MOST suited to quickly implement a control?
- A . Add a new rule to the application layer firewall
- B . Block access to the service
- C . Install an Intrusion Detection System (IDS)
- D . Patch the application source code