CISSP Practice Questions (201–220)

Answer: A

Rationale: Continuous monitoring relies on collecting, aggregating, and correlating security events to rapidly identify anomalies and emerging threats, reducing risk in real time.

Answer: D

Rationale: Without a well-defined SLA, performance expectations and measurable indicators cannot be properly established.

Answer: D

Rationale: Change management ensures traceability and accountability for every modification within the environment.

Answer: C

Rationale: Documentation is the first step in maintaining chain of custody, preserving the integrity of evidence.

Answer: D

Rationale: Testing software in a segregated environment isolates it from production, preventing malware spread if the software is compromised.

Answer: A

Rationale: IP spoofing manipulates the source address to bypass or defeat systems that rely on address-based authentication.

Answer: D

Rationale: Penetration testing rules require stopping the test and immediately escalating critical security findings to the responsible system team so the vulnerability can be remediated.

Answer: C

Rationale: CVSS focuses on quantifying severity of known, published vulnerabilities—not performing or analyzing code directly.

Answer: C

Rationale: High-level formatting does not remove underlying data; it only resets the file system structure, leaving recoverable data.

Answer: C

Rationale: Vulnerability testing assesses how effective existing security controls are in identifying and mitigating weaknesses.

Answer: D

Rationale: A covert channel hides unauthorized data transfer within legitimate traffic, such as ICMP ping payloads.

Answer: A

Rationale: Contingency exercises test personnel readiness and ensure all roles and responsibilities are understood during disruptions.

Answer: B

Rationale: Digital signatures and encryption ensure confidentiality, authentication, and non-repudiation in email communication.

Answer: B

Rationale: SQL uses GRANT and REVOKE statements to assign and remove user privileges, implementing DAC.

Answer: B

Rationale: Using cryptographic signatures such as DKIM ensures message authenticity and prevents spoofing.

Answer: D

Rationale: Link encryption encrypts entire frames—including headers—at each hop, securing all transmitted data.

Answer: B

Rationale: Mutual authentication confirms both parties—the user and the system—verify each other’s identities.

Answer: B

Rationale: BCPs should be tested whenever significant environmental or operational changes occur to ensure continued effectiveness.

Answer: A

Rationale: Security awareness training educates all users about organizational policies and proper security behavior.

Answer: D

Rationale: DAC allows data owners to decide who can access their objects and what permissions are granted.