CISSP Free Practice Test

- (Exam Topic 13)
Which of the following is the BEST Identity-as-a-Service (IDaaS) solution for validating users?

1. A. Single Sign-On (SSO)
2. B. Security Assertion Markup Language (SAML)
3. C. Lightweight Directory Access Protocol (LDAP)
4. D. Open Authentication (OAuth)

Correct Answer: B

- (Exam Topic 12)
An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the following is the BEST action to take?

1. A. Revoke access temporarily.
2. B. Block user access and delete user account after six months.
3. C. Block access to the offices immediately.
4. D. Monitor account usage temporarily.

Correct Answer: D

- (Exam Topic 15)
At the destination host, which of the following OSI model layers will discard a segment with a bad checksum
in the UDP header?

1. A. Network
2. B. Data link
3. C. Transport
4. D. Session

Correct Answer: C

- (Exam Topic 14)
A criminal organization is planning an attack on a government network. Which of the following is the MOST severe attack to the network availability?

1. A. Network management communications is disrupted by attacker
2. B. Operator loses control of network devices to attacker
3. C. Sensitive information is gathered on the network topology by attacker
4. D. Network is flooded with communication traffic by attacker

Correct Answer: B

- (Exam Topic 11)
Regarding asset security and appropriate retention, which of the following INITIAL top three areas are important to focus on?

1. A. Security control baselines, access controls, employee awareness and training
2. B. Human resources, asset management, production management
3. C. Supply chain lead time, inventory control, encryption
4. D. Polygraphs, crime statistics, forensics

Correct Answer: A