Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 13, 2026

Add To Cart

Question 1

When conducting a security assessment of access controls, which activity is part of the data analysis phase?

A : esent solutions to address audit exceptions.

B : nduct statistical sampling of data transactions.

C : tegorize and identify evidence gathered during the audit.

D : llect logs and reports.

Answer: C

Question 2

Which of the following actions MUST be taken if a vulnerability is discovered during the maintenance stage in a System Development Life Cycle (SDLC)?

A : ke changes following principle and design guidelines.

B : op the application until the vulnerability is fixed.

C : port the vulnerability to product owner.

D : nitor the application and review code.

Answer: C

Question 3

An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the following is the BEST action to take?

A : voke access temporarily.

B : ock user access and delete user account after six months.

C : ock access to the offices immediately.

D : nitor account usage temporarily.

Answer: D

Question 4

A Security Operations Center (SOC) receives an incident response notification on a server with an active

intruder who has planted a backdoor. Initial notifications are sent and communications are established.

What MUST be considered or evaluated before performing the next step?

A : tifying law enforcement is crucial before hashing the contents of the server hard drive

B : entifying who executed the incident is more important than how the incident happened

C : moving the server from the network may prevent catching the intruder

D : pying the contents of the hard drive to another storage device may damage the evidence

Answer: D

Question 5

Which of the following is an essential element of a privileged identity lifecycle management?

A : gularly perform account re-validation and approval

B : count provisioning based on multi-factor authentication

C : equently review performed activities and request justification

D : count information to be provided by supervisor or line manager

Answer: A

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 13, 2026

Add To Cart