CISSP Free Practice Test

- (Exam Topic 11)
In which order, from MOST to LEAST impacted, does user awareness training reduce the occurrence of the events below?

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 9)
Why MUST a Kerberos server be well protected from unauthorized access?

1. A. It contains the keys of all clients.
2. B. It always operates at root privilege.
3. C. It contains all the tickets for services.
4. D. It contains the Internet Protocol (IP) address of all network entities.

Correct Answer: A

- (Exam Topic 14)
Functional security testing is MOST critical during which phase of the system development life cycle (SDLC)?

1. A. Operations / Maintenance
2. B. Implementation
3. C. Acquisition / Development
4. D. Initiation

Correct Answer: B

- (Exam Topic 13)
As part of the security assessment plan, the security professional has been asked to use a negative testing strategy on a new website. Which of the following actions would be performed?

1. A. Use a web scanner to scan for vulnerabilities within the website.
2. B. Perform a code review to ensure that the database references are properly addressed.
3. C. Establish a secure connection to the web server to validate that only the approved ports are open.
4. D. Enter only numbers in the web form and verify that the website prompts the user to enter a valid input.

Correct Answer: D

- (Exam Topic 14)
Given a file containing ordered number, i.e. “123456789,” match each of the following redundant Array of independent Disks (RAID) levels to the corresponding visual representation visual representation. Note: P() = parity.
Drag each level to the appropriate place on the diagram.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A