Free ISC2 CISSP Exam Questions

Question 1

What does an organization FIRST review to assure compliance with privacy requirements?

A : t practices

B : iness objectives

C : gal and regulatory mandates

D : ployee's compliance to policies and standards

Answer: C

Question 2

Which of the following is a direct monetary cost of a security incident?

A : rale

B : putation

C : uipment

D : formation

Answer: C

Question 3

During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant.

What is the best approach for the CISO?

During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant.

What is the best approach for the CISO?

A : cument the system as high risk

B : rform a vulnerability assessment

C : rform a quantitative threat assessment

D : tate the information and move on

Answer: B

Question 4

When designing a Cyber-Physical System (CPS), which of the following should be a security practitioner's first consideration?

A : tection of sophisticated attackers

B : iliency of the system

C : pology of the network used for the system

D : k assessment of the system

Answer: B

Question 5

Refer to the information below to answer the question.

During the investigation of a security incident, it is determined that an unauthorized individual accessed a system which hosts a database containing financial information.

Aside from the potential records which may have been viewed, which of the following should be the PRIMARY concern regarding the database information?

A : authorized database changes

B : tegrity of security logs

C : ailability of the database

D : nfidentiality of the incident

Answer: A