CISSP Free Practice Test

- (Exam Topic 11)
During a fingerprint verification process, which of the following is used to verify identity and authentication?

1. A. A pressure value is compared with a stored template
2. B. Sets of digits are matched with stored values
3. C. A hash table is matched to a database of stored value
4. D. A template of minutiae is compared with a stored template

Correct Answer: D

- (Exam Topic 14)
Why do certificate Authorities (CA) add value to the security of electronic commerce transactions?

1. A. They maintain the certificate revocation list.
2. B. They maintain the private keys of transition parties.
3. C. They verify the transaction parties' private keys.
4. D. They provide a secure communication enamel to the transaction parties.

Correct Answer: D

- (Exam Topic 14)
Which of the following presents the PRIMARY concern to an organization when setting up a federated single sign-on (SSO) solution with another

1. A. Sending assertions to an identity provider
2. B. Requesting Identity assertions from the partners domain
3. C. defining the identity mapping scheme
4. D. Having the resource provider query the Identity provider

Correct Answer: C

- (Exam Topic 11)
During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant.
What is the best approach for the CISO?
Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BCDR phases to the appropriate corresponding location.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 14)
A client has reviewed a vulnerability assessment report and has stated it is inaccurate. The client states that the vulnerabilities listed are not valid because the host’s Operating system (OS) was not properly detected.
Where in the vulnerability assessment process did the error MOST likely occur?

1. A. Enumeration
2. B. Detection
3. C. Reporting
4. D. Discovery

Correct Answer: A