Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 27, 2026

Add To Cart

Question 1

A Security Operations Center (SOC) receives an incident response notification on a server with an active

intruder who has planted a backdoor. Initial notifications are sent and communications are established.

What MUST be considered or evaluated before performing the next step?

A : tifying law enforcement is crucial before hashing the contents of the server hard drive

B : entifying who executed the incident is more important than how the incident happened

C : moving the server from the network may prevent catching the intruder

D : pying the contents of the hard drive to another storage device may damage the evidence

Answer: D

Question 2

The key benefits of a signed and encrypted e-mail include

A : nfidentiality, authentication, and authorization.

B : nfidentiality, non-repudiation, and authentication.

C : n-repudiation, authorization, and authentication.

D : n-repudiation, confidentiality, and authorization.

Answer: B

Question 3

A security compliance manager of a large enterprise wants to reduce the time it takes to perform network,

system, and application security compliance audits while increasing quality and effectiveness of the results.

What should be implemented to BEST achieve the desired results?

A : nfiguration Management Database (CMDB)

B : urce code repository

C : nfiguration Management Plan (CMP)

D : tem performance monitoring application

Answer: A

Question 4

Which of the following BEST mitigates a replay attack against a system using identity federation and Security Assertion Markup Language (SAML) implementation?

A : o-factor authentication

B : gital certificates and hardware tokens

C : med sessions and Secure Socket Layer (SSL)

D : words with alpha-numeric and special characters

Answer: C

Question 5

Commercial off-the-shelf (COTS) software presents which of the following additional security concerns?

A : ndors take on the liability for COTS software vulnerabilities.

B : -house developed software is inherently less secure.

C : ploits for COTS software are well documented and publicly available.

D : TS software is inherently less secure.

Answer: C

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 27, 2026

Add To Cart