CISSP ISC2 Exam Questions and Free Practice Test

Question 13

- (Exam Topic 12)
Which of the following approaches is the MOST effective way to dispose of data on multiple hard drives?

A. Delete every file on each drive.

B. Destroy the partition table for each drive using the command line.

C. Degauss each drive individually.

D. Perform multiple passes on each drive using approved formatting methods.

Correct Answer:D

Question 14

- (Exam Topic 13)
Who is accountable for the information within an Information System (IS)?

A. Security manager

B. System owner

C. Data owner

D. Data processor

Correct Answer:B
Section: Security Operations

Question 15

- (Exam Topic 10)
An organization decides to implement a partial Public Key Infrastructure (PKI) with only the servers having digital certificates. What is the security benefit of this implementation?

A. Clients can authenticate themselves to the servers.

B. Mutual authentication is available between the clients and servers.

C. Servers are able to issue digital certificates to the client.

D. Servers can authenticate themselves to the client.

Correct Answer:D

Question 16

- (Exam Topic 13)
A company receives an email threat informing of an Imminent Distributed Denial of Service (DDoS) attack
targeting its web application, unless ransom is paid. Which of the following techniques BEST addresses that threat?

A. Deploying load balancers to distribute inbound traffic across multiple data centers

B. Set Up Web Application Firewalls (WAFs) to filter out malicious traffic

C. Implementing reverse web-proxies to validate each new inbound connection

D. Coordinate with and utilize capabilities within Internet Service Provider (ISP)

Correct Answer:D

Question 17

- (Exam Topic 13)
When network management is outsourced to third parties, which of the following is the MOST effective method of protecting critical data assets?

A. Log all activities associated with sensitive systems

B. Provide links to security policies

C. Confirm that confidentially agreements are signed

D. Employ strong access controls

Correct Answer:D

Question 18

- (Exam Topic 10)
What is the MAIN feature that onion routing networks offer?

A. Non-repudiation

B. Traceability

C. Anonymity

D. Resilience

Correct Answer:C

START CISSP EXAM