CISSP Practice Questions (181–200)

Answer: B

Rationale: Threat modeling systematically identifies vulnerabilities, threats, and mitigation strategies in an architecture, ensuring design aligns with secure principles.

Answer: B

Rationale: RFID tags communicate unique identifiers wirelessly to help track, locate, and manage assets efficiently without manual scanning.

Answer: D

Rationale: Preventing unauthorized access through strong authentication, monitoring, and access control is the primary method to stop attackers from disabling systems.

Answer: B

Rationale: A security subject matter expert conducts design reviews to identify flaws early in the SDLC, ensuring security integration before development.

Answer: C

Rationale: During the monitoring and acceptance phase, organizations verify that security and quality requirements were met and assess risk prior to operational use.

Answer: C

Rationale: Retention policies depend on host-based systems maintaining logs, compliance records, and audit data locally or within the organization’s control.

Answer: D

Rationale: The least-privilege principle applies — granting access only to application log directories ensures necessary functionality without broader risk exposure.

Answer: D

Rationale: Changing access codes (such as passwords or PINs) before traveling to a high-risk area reduces the risk of unauthorized access if previous credentials were compromised.

Answer: D

Rationale: Intellectual property rights focus on the owner's control over the distribution and delivery of their creation, ensuring the creator determines how their work is used or shared.

Answer: D

Rationale: Hiring a guard provides a reactive control that can respond to incidents in public areas, offering immediate deterrence and intervention compared to static measures.

Answer: A

Rationale: Deduplication removes redundant data by storing only unique instances, making it more efficient than compression for redundant data elimination.

Answer: B

Rationale: The Common Vulnerability Scoring System (CVSS) provides a standardized way to measure and communicate the severity of vulnerabilities.

Answer: A

Rationale: Diffie-Hellman is a key exchange algorithm that uses public and private keys to securely establish shared secrets over an insecure channel.

Answer: D

Rationale: The “Issued Phase” follows initialization and represents the point at which certificates are distributed and actively used.

Answer: A

Rationale: Packet filtering functions at the Network Layer by examining IP packets and controlling traffic based on source and destination addresses.

Answer: D

Rationale: Logical network segmentation limits lateral movement within the network, reducing an attacker’s ability to gather further data even after breaching one segment.

Answer: D

Rationale: Data stored on a SAN is considered at rest and is managed at the Application layer where data access and management occur.

Answer: A

Rationale: Reviewing host VM monitor logs is essential as they provide records of actions at the virtualization layer affecting multiple guest systems.

Answer: A

Rationale: Security continuous monitoring depends on ongoing collection and analysis of security process data to detect anomalies and ensure compliance.

Answer: D

Rationale: A BCP/DRP focuses on protecting organizational resources and ensuring essential operations can resume after disruption.