ISC CISSP Practice Exams
Last updated on Oct 22,2026- Exam Code: CISSP
- Exam Name: Certified Information Systems Security Professional
- Certification Provider: ISC
- Latest update: Oct 22,2026
Which security service is served by the process of encryption plaintext with the sender’s private key and decrypting cipher text with the sender’s public key?
- A . Confidentiality
- B . Integrity
- C . Identification
- D . Availability
Which of the following wraps the decryption key of a full disk encryption implementation and ties the hard disk drive to a particular device?
- A . Trusted Platform Module (TPM)
- B . Preboot eXecution Environment (PXE)
- C . Key Distribution Center (KDC)
- D . Simple Key-Management for Internet Protocol (SKIP)
Users require access rights that allow them to view the average salary of groups of employees .
Which control would prevent the users from obtaining an individual employee’s salary?
- A . Limit access to predefined queries
- B . Segregate the database into a small number of partitions each with a separate security level
- C . Implement Role Based Access Control (RBAC)
- D . Reduce the number of people who have access to the system for statistical purposes
Which Hyper Text Markup Language 5 (HTML5) option presents a security challenge for network data leakage prevention and/or monitoring?
- A . Cross Origin Resource Sharing (CORS)
- B . WebSockets
- C . Document Object Model (DOM) trees
- D . Web Interface Definition Language (IDL)
Which of the following is the BEST method to prevent malware from being introduced into a production environment?
- A . Purchase software from a limited list of retailers
- B . Verify the hash key or certificate key of all updates
- C . Do not permit programs, patches, or updates from the Internet
- D . Test all new software in a segregated environment
Intellectual property rights are PRIMARY concerned with which of the following?
- A . Owner’s ability to realize financial gain
- B . Owner’s ability to maintain copyright
- C . Right of the owner to enjoy their creation
- D . Right of the owner to control delivery method
In a Transmission Control Protocol/Internet Protocol (TCP/IP) stack, which layer is responsible for negotiating and establishing a connection with another node?
- A . Transport layer
- B . Application layer
- C . Network layer
- D . Session layer
Which of the following is an authentication protocol in which a new random number is generated uniquely for each login session?
- A . Challenge Handshake Authentication Protocol (CHAP)
- B . Point-to-Point Protocol (PPP)
- C . Extensible Authentication Protocol (EAP)
- D . Password Authentication Protocol (PAP)
Which of the following is a limitation of the Common Vulnerability Scoring System (CVSS) as it relates to conducting code review?
- A . It has normalized severity ratings.
- B . It has many worksheets and practices to implement.
- C . It aims to calculate the risk of published vulnerabilities.
- D . It requires a robust risk management framework to be put in place.
What is the MOST important purpose of testing the Disaster Recovery Plan (DRP)?
- A . Evaluating the efficiency of the plan
- B . Identifying the benchmark required for restoration
- C . Validating the effectiveness of the plan
- D . Determining the Recovery Time Objective (RTO)