CISSP Practice Test

CISSP Practice Test practice questions, page 2 of 20, with answer review and explanations.

Question 6

Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?

  1. Reference monitor
  2. Trusted Computing Base (TCB)
  3. Time separation
  4. Security kernel

Question 7

What process facilitates the balance of operational and economic costs of protective measures with gains in mission capability?

  1. Performance testing
  2. Risk assessment
  3. Security audit
  4. Risk management

Question 8

Clothing retailer employees are provisioned with user accounts that provide access to resources at partner businesses. All partner businesses use common identity and access management (IAM) protocols and differing technologies. Under the Extended Identity principle, what is the process flow between partner businesses to allow this IAM action?

  1. Clothing retailer acts as User Self Service, confirms identity of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to services.
  2. Clothing retailer acts as identity provider (IdP), confirms identity of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to services.
  3. Clothing retailer acts as Service Provider, confirms identity of user using industry standards, then sends credentials to partner businesses that act as an identity provider (IdP) and allows access to resources.
  4. Clothing retailer acts as Access Control Provider, confirms access of user using industry standards, then sends credentials to partner businesses that act as a Service Provider and allows access to resources.

Question 9

Which of the following statements BEST describes least privilege principle in a cloud environment?

  1. A single cloud administrator is configured to access core functions.
  2. Internet traffic is inspected for all incoming and outgoing packets.
  3. Routing configurations are regularly updated with the latest routes.
  4. Network segments remain private if unneeded to access the internet.

Question 10

An organization has been collecting a large amount of redundant and unusable data and filling up the storage area network (SAN). Management has requested the identification of a solution that will address ongoing storage problems. Which is the BEST technical solution?

  1. Compression
  2. Caching
  3. Replication
  4. Deduplication