CISSP Free Practice Test

- (Exam Topic 13)
A security compliance manager of a large enterprise wants to reduce the time it takes to perform network, system, and application security compliance audits while increasing quality and effectiveness of the results. What should be implemented to BEST achieve the desired results?

1. A. Configuration Management Database (CMDB)
2. B. Source code repository
3. C. Configuration Management Plan (CMP)
4. D. System performance monitoring application

Correct Answer: A

- (Exam Topic 15)
A developer begins employment with an information technology (IT) organization. On the first day, the developer works through the list of assigned projects and finds that some files within those projects aren't accessible, Other developers working on the same project have no trouble locating and working on the. What is the MOST likely explanation for the discrepancy in access?

1. A. The IT administrator had failed to grant the developer privileged access to the servers.
2. B. The project files were inadvertently deleted.
3. C. The new developer's computer had not been added to an access control list (ACL).
4. D. The new developer's user account was not associated with the right roles needed for the projects.

Correct Answer: A

- (Exam Topic 11)
Which of the following PRIMARILY contributes to security incidents in web-based applications?

1. A. Systems administration and operating systems
2. B. System incompatibility and patch management
3. C. Third-party applications and change controls
4. D. Improper stress testing and application interfaces

Correct Answer: C

- (Exam Topic 10)
Which of the following is a critical factor for implementing a successful data classification program?

1. A. Executive sponsorship
2. B. Information security sponsorship
3. C. End-user acceptance
4. D. Internal audit acceptance

Correct Answer: A

- (Exam Topic 10)
Which of the following MUST system and database administrators be aware of and apply when configuring systems used for storing personal employee data?

1. A. Secondary use of the data by business users
2. B. The organization's security policies and standards
3. C. The business purpose for which the data is to be used
4. D. The overall protection of corporate resources and data

Correct Answer: B