ISC2 Certified Information Systems Security Professional483 questions across 49 pages are complete and free, with no account or card.
483 questions in this bank
Free access · progress saved on this device
The security architect is designing and implementing an internal certification authority to generate digital certificates for all employees. Which of the following is the BEST solution to securely store the private keys?
Answer: B
What is the PRIMARY benefit of incident reporting and computer crime investigations?
Answer: B
The PRIMARY benefit of incident reporting and computer crime investigations is B: "Repairing the damage and preventing future occurrences". Incident reporting helps to identify and analyze security incidents, and computer crime investigations help to determine the cause of the incident and take steps to prevent it from happening again in the future. While complying with security policy, providing evidence to law enforcement, and appointing a computer emergency response team are important, they are not the primary benefit of incident reporting and computer crime investigations. Providing evidence to law enforcement is an important benefit of incident reporting and computer crime investigations, but it is not the primary benefit because the main focus of incident reporting and computer crime investigations is to repair the damage and prevent future occurrences.
Source: Adapted from community discussion — 74gjd_37
The existence of physical barriers, card and personal identification number (PIN) access systems, cameras, alarms, and security guards BEST describes this security approach?
Answer: C
Which of the following is the MOST common method of memory protection?
Answer: C
You're right. I had to ask AI just to find this out. Memory segmentation was widely used in older computer architectures, particularly in the 1980s and early 1990s. The Intel x86 architecture, for example, relied on segmentation in both real mode and protected mode. However, as systems evolved, the complexity and limitations of segmentation led to its decline in favor of paging and other memory management techniques. By the late 1990s and early 2000s, most modern operating systems and CPUs had largely moved away from segmentation — Modern systems often rely more on techniques like paging, ASLR (Address Space Layout Randomization) and other mechanisms for memory protection, which offer greater flexibility and efficiency.
Source: Adapted from community discussion — deeden
A hospital enforces the Code of Fair Information Practices. What practice applies to a patient requesting their medical records from a web portal?
Answer: D
What testing technique enables the designer to develop mitigation strategies for potential vulnerabilities?
Answer: B
Threat modeling is a process by which potential threats, such as structural vulnerabilities or the absence of appropriate safeguards, can be identified and enumerated, and countermeasures prioritized. - Source (Wiki)
Source: Adapted from community discussion — dev46
A colleague who recently left the organization asked a security professional for a copy of the organization's confidential incident management policy. Which of the following is the BEST response to this request?
Answer: D
A company is enrolled in a hard drive reuse program where decommissioned equipment is sold back to the vendor when it is no longer needed. The vendor pays more money for functioning drives than equipment that is no longer operational. Which method of data sanitization would provide the most secure means of preventing unauthorized data loss, while also receiving the most money from the vendor?
Answer: C
I agree with given answer here "C" Degaussing - once a drive has been degaussed, it can no longer be used. Single Pass - replacing 0s and 1s might not be enough. With the right tools "in theory" some of the data can be recover Muti-Pass - Gives us that "peace of mind" the data has been permanetly deleted.
Source: Adapted from community discussion — franbarpro
Which of the following BEST describes when an organization should conduct a black box security audit on a new software protect?
Answer: C
Assuming an individual has taken all of the steps to keep their internet connection private, which of the following is the BEST to browse the web privately?
Answer: C
I select C, because if you have stored the browsing/watching/liked history in your local device, it is still private, however if it is in the cloud such as google browse history, it can be turned over to law enforcement authorities unless the user goes and clears the history.
Source: Adapted from community discussion — projtfer
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISSP practice, question 71. 483 questions available.
Version 1.0.0. How we source questions