Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 01, 2026

Add To Cart

Question 1

Refer to the information below to answer the question.

During the investigation of a security incident, it is determined that an unauthorized individual accessed a system which hosts a database containing financial information.

Aside from the potential records which may have been viewed, which of the following should be the PRIMARY concern regarding the database information?

A : authorized database changes

B : tegrity of security logs

C : ailability of the database

D : nfidentiality of the incident

Answer: A

Question 2

In fault-tolerant systems, what do rollback capabilities permit?

A : toring the system to a previous functional state

B : entifying the error that caused the problem

C : lowing the system to an in a reduced manner

D : olating the error that caused the problem

Answer: A

Question 3

Which of the following is the BEST technique to facilitate secure software development?

A : here to secure coding practices for the software application under development.

B : nduct penetrating testing for the software application under development.

C : velop a threat modeling review for the software application under development.

D : rform a code review process for the software application under development.

Answer: A

Question 4

A large human resources organization wants to integrate their identity management with a trusted partner organization. The human resources organization wants to maintain the creation and management of the identities and may want to share with other partners in the future. Which of the following options BEST serves their needs?

A : derated identity

B : oud Active Directory (AD)

C : curity Assertion Markup Language (SAML)

D : ngle sign-on (SSO)

Answer: A

Question 5

Which of the following actions MUST be taken if a vulnerability is discovered during the maintenance stage in a System Development Life Cycle (SDLC)?

A : ke changes following principle and design guidelines.

B : op the application until the vulnerability is fixed.

C : port the vulnerability to product owner.

D : nitor the application and review code.

Answer: C

Page: 1 / 301

Total 1502 Questions | Updated On: Apr 01, 2026

Add To Cart