Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 01, 2026

Add To Cart

Question 1

Which of the following is the MOST effective preventative method to identify security flaws in software?

A : nitor performance in production environments.

B : rform a structured code review.

C : rform application penetration testing.

D : automated security vulnerability testing tods.

Answer: B

Question 2

An organization allows ping traffic into and out of their network. An attacker has installed a program on the network that uses the payload portion of the ping packet to move data into and out of the network. What type of attack has the organization experienced?

A : ta leakage

B : filtered channel

C : ta emanation

D : vert channel

Answer: A

Question 3

The use of proximity card to gain access to a building is an example of what type of security control?

A : gal

B : gical

C : ysical

D : ocedural

Answer: C

Question 4

An organization recently upgraded to a Voice over Internet Protocol (VoIP) phone system. Management is concerned with unauthorized phone usage. security

consultant is responsible for putting together a plan to secure these phones. Administrators have assigned unique personal identification number codes for each

person in the organization. What is the BEST solution?

A : phone locking software to enforce usage and PIN policies.

B : form the user to change the PIN regularly. Implement call detail records (CDR) reports to track usage.

C : ve the administrator enforce a policy to change the PIN regularly. Implement call detail records (CDR) reports to track usage.

D : ve the administrator change the PIN regularly. Implement call detail records (CDR) reports to track usage.

Answer: C

Question 5

In Business Continuity Planning (BCP), what is the importance of documenting business processes?

A : ovides senior management with decision-making tools

B : tablishes and adopts ongoing testing and maintenance strategies

C : fines who will perform which functions during a disaster or emergency

D : ovides an understanding of the organization's interdependencies

Answer: D

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 01, 2026

Add To Cart