Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart

Question 1

A company wants to store data related to users on an offsite server. What method can be deployed to protect the privacy of the user's information while maintaining the field-level configuration of the database?

A : {Encryption

B : coding

C : kenization

D : hing

Answer: A

Question 2

Which of the following is true of Service Organization Control (SOC) reports?

A : 1 Type 2 reports assess the security, confidentiality, integrity, and availability of an organization's controls

B : 2 Type 2 reports include information of interest to the service organization's management

C : 2 Type 2 reports assess internal controls for financial reporting

D : 3 Type 2 reports assess internal controls for financial reporting

Answer: B

Question 3

Clothing retailer employees are provisioned with user accounts that provide access to resources at partner businesses. All partner businesses use common identity and access management (IAM) protocols and differing technologies. Under the Extended Identity principle, what is the process flow between partner businesses to allow this TAM action?

A : Clothing retailer acts as identity provider (IdP), confirms identity of user using industry standards, then sends credentials to partner businesses that act as a ServiceProvider and allows access to services.

B : Clothing retailer acts as User Self Service, confirms identity of user using industry standards, then sends credentials to partner businesses that act as a ServiceProvider and allows access to services.

C : Clothing retailer acts as Service Provider, confirms identity of user using industry standards, then sends credentials to partner businesses that act as an identityprovider (IdP) and allows access to resources.

D : Clothing retailer acts as Access Control Provider, confirms access of user using industry standards, then sends credentials to partner businesses that act as a ServiceProvider and allows access to resources.

Answer: A

Question 4

The adoption of an enterprise-wide Business Continuity (BC) program requires which of the following?

A : od communication throughout the organization

B : completed Business Impact Analysis (BIA)

C : rmation of Disaster Recovery (DR) project team

D : ll-documented information asset classification

Answer: D

Question 5

Activity to baseline, tailor, and scope security controls tikes place dring which National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) step?

A : thorize IS.

B : ess security controls.

C : tegorize Information system (IS).

D : lect security controls.

Answer: D

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart