CISSP Free Practice Test

- (Exam Topic 15)
In software development, developers should use which type of queries to prevent a Structured Query Language (SQL) injection?

1. A. Parameterised
2. B. Dynamic
3. C. Static
4. D. Controlled

Correct Answer: A

- (Exam Topic 15)
An IT technician suspects a break in one of the uplinks that provides connectivity to the core switch. Which of the following command-line tools should the technician use to determine where the incident is occurring?

1. A. nslookup
2. B. show config
3. C. netstat
4. D. show interface
5. E. show counters

Correct Answer: D

- (Exam Topic 14)
A security professional should consider the protection of which of the following elements FIRST when developing a defense-in-depth strategy for a mobile workforce?

1. A. Network perimeters
2. B. Demilitarized Zones (DM2)
3. C. Databases and back-end servers
4. D. End-user devices

Correct Answer: D

- (Exam Topic 12)
The PRIMARY purpose of accreditation is to:

1. A. comply with applicable laws and regulations.
2. B. allow senior management to make an informed decision regarding whether to accept the risk of operating the system.
3. C. protect an organization’s sensitive datA.
4. D. verify that all security controls have been implemented properly and are operating in the correct manner.

Correct Answer: B

- (Exam Topic 15)
What are the first two components of logical access control?

1. A. Confidentiality and authentication
2. B. Authentication and identification
3. C. Identification and confidentiality
4. D. Authentication and availability

Correct Answer: B