ISC CISSP Practice Exams
Last updated on Oct 22,2026- Exam Code: CISSP
- Exam Name: Certified Information Systems Security Professional
- Certification Provider: ISC
- Latest update: Oct 22,2026
The goal of software assurance in application development is to
- A . enable the development of High Availability (HA) systems.
- B . facilitate the creation of Trusted Computing Base (TCB) systems.
- C . prevent the creation of vulnerable applications.
- D . encourage the development of open source applications.
Which of the following methods protects Personally Identifiable Information (PII) by use of a full replacement of the data element?
- A . Transparent Database Encryption (TDE)
- B . Column level database encryption
- C . Volume encryption
- D . Data tokenization
The Structured Query Language (SQL) implements Discretionary Access Controls (DAC) using
- A . INSERT and DELETE.
- B . GRANT and REVOKE.
- C . PUBLIC and PRIVATE.
- D . ROLLBACK and TERMINATE.
Checking routing information on e-mail to determine it is in a valid format and contains valid information is an example of which of the following anti-spam approaches?
- A . Simple Mail Transfer Protocol (SMTP) blacklist
- B . Reverse Domain Name System (DNS) lookup
- C . Hashing algorithm
- D . Header analysis
Which of the following is a PRIMARY advantage of using a third-party identity service?
- A . Consolidation of multiple providers
- B . Directory synchronization
- C . Web based logon
- D . Automated account management
Which of the following represents the GREATEST risk to data confidentiality?
- A . Network redundancies are not implemented
- B . Security awareness training is not completed
- C . Backup tapes are generated unencrypted
- D . Users have administrative privileges
The use of private and public encryption keys is fundamental in the implementation of which of the following?
- A . Diffie-Hellman algorithm
- B . Secure Sockets Layer (SSL)
- C . Advanced Encryption Standard (AES)
- D . Message Digest 5 (MD5)
Which one of the following affects the classification of data?
- A . Assigned security label
- B . Multilevel Security (MLS) architecture
- C . Minimum query size
- D . Passage of time
An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?
- A . Development, testing, and deployment
- B . Prevention, detection, and remediation
- C . People, technology, and operations
- D . Certification, accreditation, and monitoring
Which of the following mobile code security models relies only on trust?
- A . Code signing
- B . Class authentication
- C . Sandboxing
- D . Type safety