CISSP Free Practice Test

- (Exam Topic 12)
Which of the following BEST represents the concept of least privilege?

1. A. Access to an object is denied unless access is specifically allowed.
2. B. Access to an object is only available to the owner.
3. C. Access to an object is allowed unless it is protected by the information security policy.
4. D. Access to an object is only allowed to authenticated users via an Access Control List (ACL).

Correct Answer: A

- (Exam Topic 14)
Which security architecture strategy could be applied to secure an operating system (OS) baseline for deployment within the corporate enterprise?

1. A. Principle of Least Privilege
2. B. Principle of Separation of Duty
3. C. Principle of Secure Default
4. D. principle of Fail Secure

Correct Answer: D

- (Exam Topic 14)
According to the Capability Maturity Model Integration (CMMI), which of the following levels is identified by a managed process that is tailored from the organization's set of standard processes according to the organization's tailoring guidelines?

1. A. Level 0: Incomplete
2. B. Level 1: Performed
3. C. Level 2: Managed
4. D. Level 3: Defined

Correct Answer: D

- (Exam Topic 14)
Point-to-Point Protocol (PPP) was designed to specifically address what issue?

1. A. A common design flaw in telephone modems
2. B. Speed and reliability issues between dial-up users and Internet Service Providers (ISP).
3. C. Compatibility issues with personal computers and web browsers
4. D. The security of dial-up connections to remote networks

Correct Answer: B

- (Exam Topic 14)
When conducting a security assessment of access controls , Which activity is port of the data analysis phase?

1. A. Collect logs and reports.
2. B. Present solutions to address audit exceptions.
3. C. Categorize and Identify evidence gathered during the audit
4. D. Conduct statiscal sampling of data transactions.

Correct Answer: C