Free ISC2 CISSP Exam Questions

Become ISC2 Certified with updated CISSP exam questions and correct answers

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart

Question 1

A large human resources organization wants to integrate their identity management with a trusted partner organization. The human resources organization wants to maintain the creation and management of the identities and may want to share with other partners in the future. Which of the following options BEST serves their needs?

A : derated identity

B : oud Active Directory (AD)

C : curity Assertion Markup Language (SAML)

D : ngle sign-on (SSO)

Answer: A

Question 2

When implementing a data classification program, why is it important to avoid too much granularity?

A : process will require too many resources

B : will be difficult to apply to both hardware and software

C : will be difficult to assign ownership to the data

D : process will be perceived as having value

Answer: C

Question 3

An organization recently upgraded to a Voice over Internet Protocol (VoIP) phone system. Management is concerned with unauthorized phone usage. security

consultant is responsible for putting together a plan to secure these phones. Administrators have assigned unique personal identification number codes for each

person in the organization. What is the BEST solution?

A : phone locking software to enforce usage and PIN policies.

B : form the user to change the PIN regularly. Implement call detail records (CDR) reports to track usage.

C : ve the administrator enforce a policy to change the PIN regularly. Implement call detail records (CDR) reports to track usage.

D : ve the administrator change the PIN regularly. Implement call detail records (CDR) reports to track usage.

Answer: C

Question 4

The MAIN use of Layer 2 Tunneling Protocol (L2TP) is to tunnel data

A : rough a firewall at the Session layer

B : rough a firewall at the Transport layer

C : the Point-to-Point Protocol (PPP)

D : the Payload Compression Protocol (PCP)

Answer: C

Question 5

Which of the following is TRUE regarding equivalence class testing?

A : is characterized by the stateless behavior of a process implemented In a function.

B : entire partition can be covered by considering only one representative value from that partition.

C : t inputs are obtained from the derived boundaries of the given functional specifications.

D : is useful for testing communications protocols and graphical user interfaces.

Answer: C

Page: 1 / 301

Total 1502 Questions | Updated On: Jan 29, 2026

Add To Cart