ISC CISSP Practice Exams
Last updated on Oct 22,2026- Exam Code: CISSP
- Exam Name: Certified Information Systems Security Professional
- Certification Provider: ISC
- Latest update: Oct 22,2026
Logical access control programs are MOST effective when they are
- A . approved by external auditors.
- B . combined with security token technology.
- C . maintained by computer security officers.
- D . made part of the operating system.
Which of the following operates at the Network Layer of the Open System Interconnection (OSI) model?
- A . Packet filtering
- B . Port services filtering
- C . Content filtering
- D . Application access control
A security consultant has been asked to research an organization’s legal obligations to protect privacy-related information .
What kind of reading material is MOST relevant to this project?
- A . The organization’s current security policies concerning privacy issues
- B . Privacy-related regulations enforced by governing bodies applicable to the organization
- C . Privacy best practices published by recognized security standards organizations
- D . Organizational procedures designed to protect privacy information
In the area of disaster planning and recovery, what strategy entails the presentation of information about the plan?
- A . Communication
- B . Planning
- C . Recovery
- D . Escalation
An organization has doubled in size due to a rapid market share increase. The size of the Information Technology (IT) staff has maintained pace with this growth. The organization hires several contractors whose onsite time is limited. The IT department has pushed its limits building servers and rolling out workstations and has a backlog of account management requests.
Which contract is BEST in offloading the task from the IT staff?
- A . Platform as a Service (PaaS)
- B . Identity as a Service (IDaaS)
- C . Desktop as a Service (DaaS)
- D . Software as a Service (SaaS)
An organization is found lacking the ability to properly establish performance indicators for its Web hosting solution during an audit .
What would be the MOST probable cause?
- A . Absence of a Business Intelligence (BI) solution
- B . Inadequate cost modeling
- C . Improper deployment of the Service-Oriented Architecture (SOA)
- D . Insufficient Service Level Agreement (SLA)
In which of the following programs is it MOST important to include the collection of security process data?
- A . Quarterly access reviews
- B . Security continuous monitoring
- C . Business continuity testing
- D . Annual security training
What is the BEST approach to addressing security issues in legacy web applications?
- A . Debug the security issues
- B . Migrate to newer, supported applications where possible
- C . Conduct a security assessment
- D . Protect the legacy application with a web application firewall
By allowing storage communications to run on top of Transmission Control Protocol/Internet Protocol (TCP/IP) with a Storage Area Network (SAN), the
- A . confidentiality of the traffic is protected.
- B . opportunity to sniff network traffic exists.
- C . opportunity for device identity spoofing is eliminated.
- D . storage devices are protected against availability attacks.
What is the ultimate objective of information classification?
- A . To assign responsibility for mitigating the risk to vulnerable systems
- B . To ensure that information assets receive an appropriate level of protection
- C . To recognize that the value of any item of information may change over time
- D . To recognize the optimal number of classification categories and the benefits to be gained from their use