CISSP Free Practice Test

- (Exam Topic 14)
When using Security Assertion markup language (SAML), it is assumed that the principal subject

1. A. accepts persistent cookies from the system.
2. B. allows Secure Sockets Layer (SSL) for data exchanges.
3. C. is on a system that supports remote authorization.
4. D. enrolls with at least one identity provider.

Correct Answer: D

- (Exam Topic 9)
Which of the following is a network intrusion detection technique?

1. A. Statistical anomaly
2. B. Perimeter intrusion
3. C. Port scanning
4. D. Network spoofing

Correct Answer: C

- (Exam Topic 12)
What is the difference between media marking and media labeling?

1. A. Media marking refers to the use of human-readable security attributes, while media labeling refers to the use of security attributes in internal data structures.
2. B. Media labeling refers to the use of human-readable security attributes, while media marking refers to the use of security attributes in internal data structures.
3. C. Media labeling refers to security attributes required by public policy/law, while media marking refers to security required by internal organizational policy.
4. D. Media marking refers to security attributes required by public policy/law, while media labeling refers to security attributes required by internal organizational policy.

Correct Answer: D

- (Exam Topic 10)
Which of the following is a BEST practice when traveling internationally with laptops containing Personally Identifiable Information (PII)?

1. A. Use a thumb drive to transfer information from a foreign computer.
2. B. Do not take unnecessary information, including sensitive information.
3. C. Connect the laptop only to well-known networks like the hotel or public Internet cafes.
4. D. Request international points of contact help scan the laptop on arrival to ensure it is protected.

Correct Answer: B

- (Exam Topic 14)
Which of the following attacks is dependent upon the compromise of a secondary target in order to reach the primary target?

1. A. Watering hole
2. B. Brute force
3. C. Spear phishing
4. D. Address Resolution Protocol (ARP) poisoning

Correct Answer: D