CISSP Free Practice Test

- (Exam Topic 15)
Which of the following measures serves as the BEST means for protecting data on computers, smartphones, and external storage devices when traveling to high-risk countries?

1. A. Review applicable destination country laws, forensically clean devices prior to travel, and only download sensitive data over a virtual private network (VPN) upon arriving at the destination.
2. B. Keep laptops, external storage devices, and smartphones in the hotel room when not in use.
3. C. Leverage a Secure Socket Layer (SSL) connection over a virtual private network (VPN) to download sensitive data upon arriving at the destination.
4. D. Use multi-factor authentication (MFA) to gain access to data stored on laptops or external storage devices and biometric fingerprint access control isms to unlock smartphones.

Correct Answer: D

- (Exam Topic 12)
An organization’s information security strategic plan MUST be reviewed

1. A. whenever there are significant changes to a major application.
2. B. quarterly, when the organization’s strategic plan is updated.
3. C. whenever there are major changes to the business.
4. D. every three years, when the organization’s strategic plan is updated.

Correct Answer: C

- (Exam Topic 9)
In a financial institution, who has the responsibility for assigning the classification to a piece of information?

1. A. Chief Financial Officer (CFO)
2. B. Chief Information Security Officer (CISO)
3. C. Originator or nominated owner of the information
4. D. Department head responsible for ensuring the protection of the information

Correct Answer: C

- (Exam Topic 14)
A security consultant has been hired by a company to establish its vulnerability management program. The consultant is now in the deployment phase. Which of the following tasks is part of this process?

1. A. Select and procure supporting technologies.
2. B. Determine a budget and cost analysis for the program.
3. C. Measure effectiveness of the program’s stated goals.
4. D. Educate and train key stakeholders.

Correct Answer: C

- (Exam Topic 13)
Due to system constraints, a group of system administrators must share a high-level access set of credentials. Which of the following would be MOST appropriate to implement?

1. A. Increased console lockout times for failed logon attempts
2. B. Reduce the group in size
3. C. A credential check-out process for a per-use basis
4. D. Full logging on affected systems

Correct Answer: C
Section: Security Operations