ISC CISSP Practice Exams
Last updated on Oct 22,2026- Exam Code: CISSP
- Exam Name: Certified Information Systems Security Professional
- Certification Provider: ISC
- Latest update: Oct 22,2026
Which of the following can BEST prevent security flaws occurring in outsourced software development?
- A . Contractual requirements for code quality
- B . Licensing, code ownership and intellectual property rights
- C . Certification of the quality and accuracy of the work done
- D . Delivery dates, change management control and budgetary control
Passive Infrared Sensors (PIR) used in a non-climate controlled environment should
- A . reduce the detected object temperature in relation to the background temperature.
- B . increase the detected object temperature in relation to the background temperature.
- C . automatically compensate for variance in background temperature.
- D . detect objects of a specific temperature independent of the background temperature.
Which of the following is the BEST network defense against unknown types of attacks or stealth attacks in progress?
- A . Intrusion Prevention Systems (IPS)
- B . Intrusion Detection Systems (IDS)
- C . Stateful firewalls
- D . Network Behavior Analysis (NBA) tools
What should be the FIRST action to protect the chain of evidence when a desktop computer is involved?
- A . Take the computer to a forensic lab
- B . Make a copy of the hard drive
- C . Start documenting
- D . Turn off the computer
Which of the following elements MUST a compliant EU-US Safe Harbor Privacy Policy contain?
- A . An explanation of how long the data subject’s collected information will be retained for and how it will be eventually disposed.
- B . An explanation of who can be contacted at the organization collecting the information if corrections are required by the data subject.
- C . An explanation of the regulatory frameworks and compliance standards the information collecting organization adheres to.
- D . An explanation of all the technologies employed by the collecting organization in gathering information on the data subject.
At a MINIMUM, a formal review of any Disaster Recovery Plan (DRP) should be conducted
- A . monthly.
- B . quarterly.
- C . annually.
- D . bi-annually.
Alternate encoding such as hexadecimal representations is MOST often observed in which of the following forms of attack?
- A . Smurf
- B . Rootkit exploit
- C . Denial of Service (DoS)
- D . Cross site scripting (XSS)
What is the MOST important consideration from a data security perspective when an organization plans to relocate?
- A . Ensure the fire prevention and detection systems are sufficient to protect personnel
- B . Review the architectural plans to determine how many emergency exits are present
- C . Conduct a gap analysis of a new facilities against existing security requirements
- D . Revise the Disaster Recovery and Business Continuity (DR/BC) plan
Which of the following is an effective control in preventing electronic cloning of Radio Frequency Identification (RFID) based access cards?
- A . Personal Identity Verification (PIV)
- B . Cardholder Unique Identifier (CHUID) authentication
- C . Physical Access Control System (PACS) repeated attempt detection
- D . Asymmetric Card Authentication Key (CAK) challenge-response
Which of the following is an initial consideration when developing an information security management system?
- A . Identify the contractual security obligations that apply to the organizations
- B . Understand the value of the information assets
- C . Identify the level of residual risk that is tolerable to management
- D . Identify relevant legislative and regulatory compliance requirements