Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart

Question 1

Which of the following is the PRIMARY risk with using open source software in a commercial software construction?

A : ck of software documentation

B : cense agreements requiring release of modified code

C : piration of the license agreement

D : ts associated with support of the software

Answer: D

Question 2

Refer to the information below to answer the question.

During the investigation of a security incident, it is determined that an unauthorized individual accessed a system which hosts a database containing financial information.

Aside from the potential records which may have been viewed, which of the following should be the PRIMARY concern regarding the database information?

A : authorized database changes

B : tegrity of security logs

C : ailability of the database

D : nfidentiality of the incident

Answer: A

Question 3

Refer to the information below to answer the question.

A security practitioner detects client-based attacks on the organization's network. A plan will be necessary to address these concerns.

What MUST the plan include in order to reduce client-side exploitation?

A : proved web browsers

B : twork firewall procedures

C : oxy configuration

D : ployee education

Answer: D

Question 4

Refer to the information below to answer the question.

Desktop computers in an organization were sanitized for re-use in an equivalent security environment. The data was destroyed in accordance with organizational policy and all marking and other external indications of the sensitivity of the data that was formerly stored on the magnetic drives were removed.

Organizational policy requires the deletion of user data from Personal Digital Assistant (PDA) devices before disposal. It may not be possible to delete the user data if the device is malfunctioning. Which destruction method below provides the BEST assurance that the data has been removed?

A : urling

B : inding

C : redding

D : gaussing

Answer: C

Question 5

An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the following is the BEST action to take?

A : voke access temporarily.

B : ock user access and delete user account after six months.

C : ock access to the offices immediately.

D : nitor account usage temporarily.

Answer: D

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart