CISSP Free Practice Test

- (Exam Topic 14)
Which of the following is used to support the of defense in depth during development phase of a software product?

1. A. Security auditing
2. B. Polyinstantiation
3. C. Maintenance
4. D. Known vulnerability list

Correct Answer: B

- (Exam Topic 14)
If a content management system (CSM) is implemented, which one of the following would occur?

1. A. The test and production systems would be riming the same software
2. B. The applications placed into production would be secure
3. C. Developers would no longer have access to production systems
4. D. Patching the systems would be completed mere quickly

Correct Answer: A

- (Exam Topic 15)
In the common criteria, which of the following is a formal document that expresses an implementation-independent set of security requirements?

1. A. Organizational Security Policy
2. B. Security Target (ST)
3. C. Protection Profile (PP)
4. D. Target of Evaluation (TOE)

Correct Answer: C

- (Exam Topic 12)
Which of the following is needed to securely distribute symmetric cryptographic keys?

1. A. Officially approved Public-Key Infrastructure (PKI) Class 3 or Class 4 certificates
2. B. Officially approved and compliant key management technology and processes
3. C. An organizationally approved communication protection policy and key management plan
4. D. Hardware tokens that protect the user’s private key.

Correct Answer: C

- (Exam Topic 15)
A client server infrastructure that provides user-to-server authentication describes which one of the following?

1. A. Secure Sockets Layer (SSL)
2. B. Kerberos
3. C. 509
4. D. User-based authorization

Correct Answer: B