Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

CISSP Certified Information Systems Security Professional

  • ISC2
  • 7 free sample questions

About this exam

CISSP is the ISC2 exam Certified Information Systems Security Professional. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
CISSP
Vendor
ISC2
Practice questions
Not available yet
Free sample questions
7
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for CISSP.

Question 1

Which of the following represents the GREATEST risk to data confidentiality?

  1. Option A:

    Network redundancies are not implemented

  2. Option B:
    Security awareness training is not completed 
  3. Option C:
    Backup tapes are generated unencrypted
  4. Option D:
    Users have administrative privileges 
Show answer and explanation

Correct answer: C

Generating backup tapes unencrypted represents the greatest risk to data confidentiality, as it exposes the data to unauthorized access or disclosure if the tapes are lost, stolen, or intercepted. Backup tapes are often stored off-site or transported to remote locations, which increases the chances of them falling into the wrong hands. If the backup tapes are unencrypted, anyone who obtains them can read the data without any difficulty. Therefore, backup tapes should always be encrypted using strong algorithms and keys, and the keys should be protected and managed separately from the tapes. The other options do not pose as much risk to data confidentiality as generating backup tapes unencrypted. Network redundancies are not implemented will affect the availability and reliability of the network, but not necessarily the confidentiality of the data. Security awareness training is not completed will increase the likelihood of human errors or negligence that could compromise the data, but not as directly as generating backup tapes unencrypted. Users have administrative privileges will grant users more access and control over the system and the data, but not as widely as generating backup tapes unencrypted. 

Question 2

Which of the following is MOST important when assigning ownership of an asset to a department? 

  1. Option A:
    The department should report to the business owner
  2. Option B:
    Ownership of the asset should be periodically reviewed
  3. Option C:
    Individual accountability should be ensured
  4. Option D:
    All members should be trained on their responsibilities 
Show answer and explanation

Correct answer: C

When assigning ownership of an asset to a department, the most important factor is to ensure
individual accountability for the asset. Individual accountability means that each person who has
access to or uses the asset is responsible for its protection and proper handling. Individual
accountability also implies that each person who causes or contributes to a security breach or
incident involving the asset can be identified and held liable. Individual accountability can be
achieved by implementing security controls such as authentication, authorization, auditing, and
logging. The other options are not as important as ensuring individual accountability, as they do not directly
address the security risks associated with the asset. The department should report to the business
owner is a management issue, not a security issue. Ownership of the asset should be periodically
reviewed is a good practice, but it does not prevent misuse or abuse of the asset. All members
should be trained on their responsibilities is a preventive measure, but it does not guarantee
compliance or enforcement of the responsibilities.

See all 7 free sample questions