CISSP Practice Test

Review 484 CISSP practice questions with answer explanations and community insights.

Question 1

Physical assets defined in an organization's business impact analysis (BIA) could include which of the following?

  1. Personal belongings of organizational staff members
  2. Disaster recovery (DR) line-item revenues
  3. Cloud-based applications
  4. Supplies kept off-site a remote facility

Question 2

When assessing the audit capability of an application, which of the following activities is MOST important?

  1. Identify procedures to investigate suspicious activity.
  2. Determine if audit records contain sufficient information.
  3. Verify if sufficient storage is allocated for audit records.
  4. Review security plan for actions to be taken in the event of audit failure.

Question 3

An organization would like to implement an authorization mechanism that would simplify the assignment of various system access permissions for many users with similar job responsibilities. Which type of authorization mechanism would be the BEST choice for the organization to implement?

  1. Role-based access control (RBAC)
  2. Discretionary access control (DAC)
  3. Content-dependent Access Control
  4. Rule-based Access Control

Question 4

What is the PRIMARY reason for criminal law being difficult to enforce when dealing with cybercrime?

  1. Jurisdiction is hard to define.
  2. Law enforcement agencies are understaffed.
  3. Extradition treaties are rarely enforced.
  4. Numerous language barriers exist.

Question 5

Wi-Fi Protected Access 2 (WPA2) provides users with a higher level of assurance that their data will remain protected by using which protocol?

  1. Extensible Authentication Protocol (EAP)
  2. Internet Protocol Security (IPsec)
  3. Secure Sockets Layer (SSL)
  4. Secure Shell (SSH)