Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Nov 24, 2025

Add To Cart

Question 1

Which of the following is a key responsibility for a data steward assigned to manage an enterprise data lake?

A : ure proper business definition, value, and usage of data collected and stored within the enterprise data lake.

B : ure proper and identifiable data owners for each data element stored within an enterprise data lake.

C : ure adequate security controls applied to the enterprise data lake.

D : ure that any data passing within remit is being used in accordance with the rules and regulations of the business.

Answer: A

Question 2

What is the FINAL step in the waterfall method for contingency planning?

A : intenance

B : ting

C : plementation

D : aining

Answer: A

Question 3

Activity to baseline, tailor, and scope security controls tikes place dring which National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) step?

A : thorize IS.

B : ess security controls.

C : tegorize Information system (IS).

D : lect security controls.

Answer: D

Question 4

Which of the following is the MOST important output from a mobile application threat modeling exercise according to Open Web Application Security Project (OWASP)?

A : plication interface entry and endpoints

B : likelihood and impact of a vulnerability

C : untermeasures and mitigations for vulnerabilities

D : data flow diagram for the application and attack surface analysis

Answer: D

Question 5

Refer to the information below to answer the question.

Desktop computers in an organization were sanitized for re-use in an equivalent security environment. The data was destroyed in accordance with organizational policy and all marking and other external indications of the sensitivity of the data that was formerly stored on the magnetic drives were removed.

Organizational policy requires the deletion of user data from Personal Digital Assistant (PDA) devices before disposal. It may not be possible to delete the user data if the device is malfunctioning. Which destruction method below provides the BEST assurance that the data has been removed?

A : urling

B : inding

C : redding

D : gaussing

Answer: C

Page: 1 / 301

Total 1502 Questions | Updated On: Nov 24, 2025

Add To Cart