CISSP Practice Test

CISSP Practice Test practice questions, page 9 of 20, with answer review and explanations.

Question 41

Which of the following is the BEST option to reduce the network attack surface of a system?

  1. Disabling unnecessary ports and services
  2. Ensuring that there are no group accounts on the system
  3. Uninstalling default software on the system
  4. Removing unnecessary system user accounts

Question 42

The security architect is designing and implementing an internal certification authority to generate digital certificates for all employees. Which of the following is the BEST solution to securely store the private keys?

  1. Physically secured storage device
  2. Trusted Platform Module (TPM)
  3. Encrypted flash drive
  4. Public key infrastructure (PKI)

Question 43

The existence of physical barriers, card and personal identification number (PIN) access systems, cameras, alarms, and security guards BEST describes this security approach?

  1. Access control
  2. Security information and event management (SIEM)
  3. Defense-in-depth
  4. Security perimeter

Question 44

A hospital enforces the Code of Fair Information Practices. What practice applies to a patient requesting their medical records from a web portal?

  1. Purpose specification
  2. Collection limitation
  3. Use limitation
  4. Individual participation

Question 45

A colleague who recently left the organization asked a security professional for a copy of the organization's confidential incident management policy. Which of the following is the BEST response to this request?

  1. Access the policy on a company-issued device and let the former colleague view the screen.
  2. E-mail the policy to the colleague as they were already part of the organization and familiar with it.
  3. Do not acknowledge receiving the request from the former colleague and ignore them.
  4. Submit the request using company official channels to ensure the policy is okay to distribute.