Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 22, 2026

Add To Cart

Question 1

What action should be taken by a business line that is unwilling to accept the residual risk in a system after implementing compensating controls?

A : tify the audit committee of the situation.

B : rchase insurance to cover the residual risk.

C : plement operational safeguards.

D : nd another business line willing to accept the residual risk.

Answer: B

Question 2

Although code using a specific program language may not be susceptible to a buffer overflow attack,

A : t calls to plug-in programs are susceptible.

B : t supporting application code is susceptible.

C : graphical images used by the application could be susceptible.

D : supporting virtual machine could be susceptible.

Answer: C

Question 3

Which of the following is a PRIMARY advantage of using a third-party identity service?

A : nsolidation of multiple providers

B : rectory synchronization

C : based logon

D : tomated account management

Answer: D

Question 4

When planning a penetration test, the tester will be MOST interested in which information?

A : aces to install back doors

B : main network access points

C : application handouts and tours

D : ploits that can attack weaknesses

Answer: D

Question 5

A security compliance manager of a large enterprise wants to reduce the time it takes to perform network,

system, and application security compliance audits while increasing quality and effectiveness of the results.

What should be implemented to BEST achieve the desired results?

A : nfiguration Management Database (CMDB)

B : urce code repository

C : nfiguration Management Plan (CMP)

D : tem performance monitoring application

Answer: A

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 22, 2026

Add To Cart