ISC CISSP Practice Exams
Last updated on Oct 22,2026- Exam Code: CISSP
- Exam Name: Certified Information Systems Security Professional
- Certification Provider: ISC
- Latest update: Oct 22,2026
An advantage of link encryption in a communications network is that it
- A . makes key management and distribution easier.
- B . protects data from start to finish through the entire network.
- C . improves the efficiency of the transmission.
- D . encrypts all information, including headers and routing information.
A continuous information security monitoring program can BEST reduce risk through which of the following?
- A . Collecting security events and correlating them to identify anomalies
- B . Facilitating system-wide visibility into the activities of critical user accounts
- C . Encompassing people, process, and technology
- D . Logging both scheduled and unscheduled system changes
What is the MOST important step during forensic analysis when trying to learn the purpose of an unknown application?
- A . Disable all unnecessary services
- B . Ensure chain of custody
- C . Prepare another backup of the system
- D . Isolate the system from the network
A software scanner identifies a region within a binary image having high entropy .
What does this MOST likely indicate?
- A . Encryption routines
- B . Random number generator
- C . Obfuscated code
- D . Botnet command and control
Why must all users be positively identified prior to using multi-user computers?
- A . To provide access to system privileges
- B . To provide access to the operating system
- C . To ensure that unauthorized persons cannot access the computers
- D . To ensure that management knows what users are currently logged on
Which of the following BEST describes an access control method utilizing cryptographic keys derived from a smart card private key that is embedded within mobile devices?
- A . Derived credential
- B . Temporary security credential
- C . Mobile device credentialing service
- D . Digest authentication
Which of the following is a web application control that should be put into place to prevent exploitation of Operating System (OS) bugs?
- A . Check arguments in function calls
- B . Test for the security patch level of the environment
- C . Include logging functions
- D . Digitally sign each application module
When is a Business Continuity Plan (BCP) considered to be valid?
- A . When it has been validated by the Business Continuity (BC) manager
- B . When it has been validated by the board of directors
- C . When it has been validated by all threat scenarios
- D . When it has been validated by realistic exercises
In a basic SYN flood attack, what is the attacker attempting to achieve?
- A . Exceed the threshold limit of the connection queue for a given service
- B . Set the threshold to zero for a given service
- C . Cause the buffer to overflow, allowing root access
- D . Flush the register stack, allowing hijacking of the root account
An external attacker has compromised an organization’s network security perimeter and installed a sniffer onto an inside computer .
Which of the following is the MOST effective layer of security the organization could have implemented to mitigate the attacker’s ability to gain further information?
- A . Implement packet filtering on the network firewalls
- B . Install Host Based Intrusion Detection Systems (HIDS)
- C . Require strong authentication for administrators
- D . Implement logical network segmentation at the switches