Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart

Question 1

International bodies established a regulatory scheme that defines how weapons are exchanged between the signatories. It also addresses cyber weapons, including malicious software, Command and Control (C2) software, and internet surveillance software. This is a description of which of the following?

A : neral Data Protection Regulation (GDPR)

B : lermo convention

C : enaar arrangement

D : ternational Traffic in Arms Regulations (ITAR)

Answer: C

Question 2

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

A : ure the fire prevention and detection systems are sufficient to protect personnel

B : view the architectural plans to determine how many emergency exits are present

C : nduct a gap analysis of a new facilities against existing security requirements

D : vise the Disaster Recovery and Business Continuity (DR/BC) plan

Answer: C

Question 3

What is the PRIMARY benefit of relying on Security Content Automation Protocol (SCAP)?

A : ve security costs for the organization.

B : prove vulnerability assessment capabilities.

C : andardize specifications between software security products.

D : hieve organizational compliance with international standards.

Answer: C

Question 4

Users require access rights that allow them to view the average salary of groups of employees. Which control would prevent the users from obtaining an individual employee's salary?

A : mit access to predefined queries

B : gregate the database into a small number of partitions each with a separate security level

C : plement Role Based Access Control (RBAC)

D : duce the number of people who have access to the system for statistical purposes

Answer: C

Question 5

A company is enrolled in a hard drive reuse program where decommissioned equipment is sold back to the vendor when it is no longer needed. The vendor pays more money for functioning drives than equipment that is no longer operational. Which method of data sanitization would provide the most secure means of preventing unauthorized data loss, while

also receiving the most money from the vendor?

A : nning

B : ngle-pass wipe

C : gaussing

D : lti-pass wipes

Answer: C

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart