CISSP Free Practice Test

- (Exam Topic 10)
When is security personnel involvement in the Systems Development Life Cycle (SDLC) process MOST beneficial?

1. A. Testing phase
2. B. Development phase
3. C. Requirements definition phase
4. D. Operations and maintenance phase

Correct Answer: C

- (Exam Topic 9)
Which of the following methods protects Personally Identifiable Information (PII) by use of a full replacement of the data element?

1. A. Transparent Database Encryption (TDE)
2. B. Column level database encryption
3. C. Volume encryption
4. D. Data tokenization

Correct Answer: D

- (Exam Topic 15)
During a Disaster Recovery (DR) simulation, it is discovered that the shared recovery site lacks adequate data restoration capabilities to support the implementation of multiple plans simultaneously. What would be impacted by this fact if left unchanged?

1. A. Recovery Point Objective (RPO)
2. B. Recovery Time Objective (RTO)
3. C. Business Impact Analysis (BIA)
4. D. Return on Investment (ROI)
5. E. A

Correct Answer: E

- (Exam Topic 10)
Without proper signal protection, embedded systems may be prone to which type of attack?

1. A. Brute force
2. B. Tampering
3. C. Information disclosure
4. D. Denial of Service (DoS)

Correct Answer: C

- (Exam Topic 13)
A minimal implementation of endpoint security includes which of the following?

1. A. Trusted platforms
2. B. Host-based firewalls
3. C. Token-based authentication
4. D. Wireless Access Points (AP)

Correct Answer: B