CISSP Free Practice Test

- (Exam Topic 14)
Which layer of the Open system Interconnect (OSI) model is responsible for secure data transfer between applications, flow control, and error detection and correction?

1. A. Layer 2
2. B. Layer 4
3. C. Layer 5
4. D. Layer 6

Correct Answer: B

- (Exam Topic 11)
Single Sign-On (SSO) is PRIMARILY designed to address which of the following?

1. A. Confidentiality and Integrity
2. B. Availability and Accountability
3. C. Integrity and Availability
4. D. Accountability and Assurance

Correct Answer: D

- (Exam Topic 14)
An organization wants to enable uses to authenticate across multiple security domains. To accomplish this they have decided to use Federated Identity Management (F1M). Which of the following is used behind the scenes in a FIM deployment?

1. A. Standard Generalized Markup Language (SGML)
2. B. Extensible Markup Language (XML)
3. C. Security Assertion Markup Language (SAML)
4. D. Transaction Authority Markup Language (XAML)

Correct Answer: C

- (Exam Topic 10)
When using third-party software developers, which of the following is the MOST effective method of providing software development Quality Assurance (QA)?

1. A. Retain intellectual property rights through contractual wording.
2. B. Perform overlapping code reviews by both parties.
3. C. Verify that the contractors attend development planning meetings.
4. D. Create a separate contractor development environment.

Correct Answer: B

- (Exam Topic 15)
Information security practitioners are in the midst of implementing a new firewall. Which of the following failure methods would BEST prioritize security in the event of failure?

1. A. Fail-Closed
2. B. Fail-Open
3. C. Fail-Safe
4. D. Failover

Correct Answer: A