CISSP Free Practice Test

- (Exam Topic 13)
In a change-controlled environment, which of the following is MOST likely to lead to unauthorized changes to production programs?

1. A. Modifying source code without approval
2. B. Promoting programs to production without approval
3. C. Developers checking out source code without approval
4. D. Developers using Rapid Application Development (RAD) methodologies without approval

Correct Answer: A

- (Exam Topic 15)
When developing an organization's information security budget, it is important that the

1. A. expected risk can be managed appropriately with the funds allocated.
2. B. requested funds are at an equal amount to the expected cost of breaches.
3. C. requested funds are part of a shared funding pool with other areas.
4. D. expected risk to the organization does not exceed the funds allocated.

Correct Answer: A

- (Exam Topic 14)
Which of the following can be used to calculate the loss event probability?

1. A. Total number of possible outcomes divided by frequency of outcomes
2. B. Number of outcomes divided by total number of possible outcomes
3. C. Number of outcomes multiplied by total number of possible outcomes
4. D. Total number of possible outcomes multiplied by frequency of outcomes

Correct Answer: B

- (Exam Topic 15)
Which of the following virtual network configuration options is BEST to protect virtual machines (VM)?

1. A. Traffic filtering
2. B. Data encryption
3. C. Data segmentation
4. D. Traffic throttling

Correct Answer: D

- (Exam Topic 13)
An organization plan on purchasing a custom software product developed by a small vendor to support its business model. Which unique consideration should be made part of the contractual agreement potential
long-term risks associated with creating this dependency?

1. A. A source code escrow clause
2. B. Right to request an independent review of the software source code
3. C. Due diligence form requesting statements of compliance with security requirements
4. D. Access to the technical documentation

Correct Answer: B