CISSP Free Practice Test

- (Exam Topic 15)
Which of the following is TRUE for an organization that is using a third-party federated identity service?

1. A. The organization enforces the rules to other organization's user provisioning
2. B. The organization establishes a trust relationship with the other organizations
3. C. The organization defines internal standard for overall user identification
4. D. The organization specifies alone how to authenticate other organization's users

Correct Answer: C

- (Exam Topic 13)
Which of the BEST internationally recognized standard for evaluating security products and systems?

1. A. Payment Card Industry Data Security Standards (PCI-DSS)
2. B. Common Criteria (CC)
3. C. Health Insurance Portability and Accountability Act (HIPAA)
4. D. Sarbanes-Oxley (SOX)

Correct Answer: B

- (Exam Topic 15)
Which of the following addresses requirements of security assessment during software acquisition?

1. A. Software assurance policy
2. B. Continuous monitoring
3. C. Software configuration management (SCM)
4. D. Data loss prevention (DLP) policy

Correct Answer: B

- (Exam Topic 14)
What is the BEST method if an investigator wishes to analyze a hard drive which may be used as evidence?

1. A. Leave the hard drive in place and use only verified and authenticated Operating Systems (OS) utilities ...
2. B. Log into the system and immediately make a copy of all relevant files to a Write Once, Read Many ...
3. C. Remove the hard drive from the system and make a copy of the hard drive's contents using imaging hardware.
4. D. Use a separate bootable device to make a copy of the hard drive before booting the system and analyzing the hard drive.

Correct Answer: C

- (Exam Topic 13)
Which of the following is the MOST effective practice in managing user accounts when an employee is terminated?

1. A. Implement processes for automated removal of access for terminated employees.
2. B. Delete employee network and system IDs upon termination.
3. C. Manually remove terminated employee user-access to all systems and applications.
4. D. Disable terminated employee network ID to remove all access.

Correct Answer: B