CISSP Free Practice Test

- (Exam Topic 11)
Which one of the following is a common risk with network configuration management?

1. A. Patches on the network are difficult to keep current.
2. B. It is the responsibility of the systems administrator.
3. C. User ID and passwords are never set to expire.
4. D. Network diagrams are not up to date.

Correct Answer: D

- (Exam Topic 11)
A health care provider is considering Internet access for their employees and patients. Which of the following is the organization's MOST secure solution for protection of data?

1. A. Public Key Infrastructure (PKI) and digital signatures
2. B. Trusted server certificates and passphrases
3. C. User ID and password
4. D. Asymmetric encryption and User ID

Correct Answer: A

- (Exam Topic 15)
Which of the following is TRUE for an organization that is using a third-party federated identity service?

1. A. The organization enforces the rules to other organization's user provisioning
2. B. The organization establishes a trust relationship with the other organizations
3. C. The organization defines internal standard for overall user identification
4. D. The organization specifies alone how to authenticate other organization's users

Correct Answer: C

- (Exam Topic 14)
What is the FIRST step required in establishing a records retention program?

1. A. Identify and inventory all records storage locations.
2. B. Classify records based on sensitivity.
3. C. Identify and inventory all records.
4. D. Draft a records retention policy.

Correct Answer: D

- (Exam Topic 14)
What is the BEST way to establish identity over the internet?

1. A. Challenge Handshake Authentication Protocol (CHAP) and strong passwords
2. B. Internet Mail Access Protocol (IMAP) with Triple Data Encryption Standard (3DES)
3. C. Remote Authentication Dial-In User Service (RADIUS) server with hardware tokens
4. D. Remote user authentication via Simple Object Access Protocol (SOAP)

Correct Answer: D