Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Nov 24, 2025

Add To Cart

Question 1

In order to provide dual assurance in a digital signature system, the design MUST include which of the following?

A : public key must be unique for the signed document.

B : gnature process must generate adequate authentication credentials.

C : hash of the signed document must be present.

D : encrypted private key must be provided in the signing certificate.

Answer: B

Question 2

In fault-tolerant systems, what do rollback capabilities permit?

A : toring the system to a previous functional state

B : entifying the error that caused the problem

C : lowing the system to an in a reduced manner

D : olating the error that caused the problem

Answer: A

Question 3

Why would a system be structured to isolate different classes of information from one another and segregate them by user jurisdiction?

A : organization can avoid e-discovery processes in the event of litigation.

B : organization's infrastructure is clearly arranged and scope of responsibility is simplified

C : organization can vary its system policies to comply with conflicting national laws.

D : organization is required to provide different services to various third-party organizations.

Answer: C

Question 4

Although code using a specific program language may not be susceptible to a buffer overflow attack,

A : t calls to plug-in programs are susceptible.

B : t supporting application code is susceptible.

C : graphical images used by the application could be susceptible.

D : supporting virtual machine could be susceptible.

Answer: C

Question 5

After a breach incident, investigators narrowed the attack to a specific network administrator's credentials. However, there was no evidence to determine how the hackers obtained the credentials. Much of the following actions could have BEST avoided the above breach per the investigation described above?

A : periodic review of network access loos

B : periodic review of active users en the network

C : periodic review of all privileged accounts actions

D : periodic review of password strength of all users across the organization

Answer: C

Page: 1 / 301

Total 1502 Questions | Updated On: Nov 24, 2025

Add To Cart