CISSP Practice Test

CISSP Practice Test practice questions, page 19 of 20, with answer review and explanations.

Question 91

Under the General Data Protection Regulation (GDPR), what is the maximum amount of time allowed for reporting a personal data breach?

  1. 24 hours
  2. 48 hours
  3. 72 hours
  4. 96 hours

Question 92

A financial organization that works according to agile principles has developed a new application for their external customer base to request a line of credit. A security analyst has been asked to assess the security risk of the minimum viable product (MVP). Which is the MOST important activity the analyst should assess?

  1. The software has been signed off for release by the product owner.
  2. The software had been branded according to corporate standards.
  3. The software has the correct functionality.
  4. The software has been code reviewed.

Question 93

An application developer receives a report back from the security team showing their automated tools were able to successfully enter unexpected data into the organization's customer service portal, causing the site to crash. This is an example of which type of testing?

  1. Performance
  2. Positive
  3. Non-functional
  4. Negative

Question 94

Which of the following is the MOST effective strategy to prevent an attacker from disabling a network?

  1. Design networks with the ability to adapt, reconfigure, and fail over.
  2. Test business continuity and disaster recovery (DR) plans.
  3. Follow security guidelines to prevent unauthorized network access.
  4. Implement network segmentation to achieve robustness.

Question 95

What is the FIRST step that should be considered in a Data Loss Prevention (DLP) program?

  1. Policy creation
  2. Information Rights Management (IRM)
  3. Data classification
  4. Configuration management (CM)