ISC2 Certified Information Systems Security Professional483 questions across 49 pages are complete and free, with no account or card.
483 questions in this bank
Free access · progress saved on this device
Physical assets defined in an organization's business impact analysis (BIA) could include which of the following?
Answer: D
Supplies, especially those kept off-site for disaster recovery or business continuity purposes, are physical assets. If these supplies are essential for the organization to continue its operations after a disruption, they would be considered in a BIA.
Source: Adapted from community discussion — 01010100
An organization has been collecting a large amount of redundant and unusable data and filling up the storage area network (SAN). Management has requested the identification of a solution that will address ongoing storage problems. Which is the BEST technical solution?
Answer: D
"D" it is. Data deduplication is a process that eliminates excessive copies of data and significantly decreases storage capacity requirements. Deduplication can be run as an inline process as the data is being written into the storage system and/or as a background process to eliminate duplicates after the data is written to disk. https://www.netapp.com/data-management/what-is-data-deduplication/#:~:text=Data%20deduplication%20is%20a%20process,data%20is%20written%20to%20disk.
Source: Adapted from community discussion — franbarpro
What is the PRIMARY purpose of creating and reporting metrics for a security awareness, training, and education program?
Answer: A
A. Measure the effect of the program on the organization's workforce. Creating and reporting metrics for a security awareness, training, and education program allows organizations to assess the effectiveness and impact of the program on their workforce By measuring the effect of the program, organizations can determine if their workforce is gaining knowledge, adopting desired behaviors, and applying security practices effectively.
Source: Adapted from community discussion — Bach1968
An organization would like to implement an authorization mechanism that would simplify the assignment of various system access permissions for many users with similar job responsibilities. Which type of authorization mechanism would be the BEST choice for the organization to implement?
Answer: A
In a DevOps environment, which of the following actions is MOST necessary to have confidence in the quality of the changes being made?
Answer: B
CISSP Official Study Guide pg 966 "...organizations using the DevOps model often deploy code several times per day. Some organizations even strive to reach the goal of continuous integration/continuous delivery (CI/CD), where code may roll out dozens or even hundreds of times per day. This requires a high degree of automation, including integrating code repositories, the software configuration management process, and the movement of code between development, testing, and production environments."
Source: Adapted from community discussion — RVoigt
What is the PRIMARY reason for criminal law being difficult to enforce when dealing with cybercrime?
Answer: A
What is the MAIN purpose of a security assessment plan?
Answer: B
The MAIN purpose of a security assessment plan is: B. Provide the objectives for the security and privacy control assessments and a detailed roadmap of how to conduct such assessments. A security assessment plan outlines the objectives, scope, methodology, and approach for conducting security and privacy control assessments within an organization. Its primary purpose is to provide a clear roadmap and guidance on how to assess and evaluate the effectiveness of security controls in place.
Source: Adapted from community discussion — Bach1968
Wi-Fi Protected Access 2 (WPA2) provides users with a higher level of assurance that their data will remain protected by using which protocol?
Answer: A
What documentation is produced FIRST when performing an effective physical loss control process?
Answer: D
I believe the key in the question here is word "effective": (effective physical loss control process). ! Asset valuation should be the answer. Because this list is not any list, but it is driven from risk analysis process.
Source: Adapted from community discussion — oudmaster
Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISSP practice, question 1. 483 questions available.
Version 1.0.0. How we source questions