CISSP Practice Questions (581–600)

Answer: C

Rationale: ICS environments prioritize stability and continuous uptime, so introducing unexpected traffic can disrupt operations and cause failures.

Answer: D

Rationale: Clear and consistent provisioning policies ensure that automated reconciliation works correctly by aligning accounts and entitlements with policy standards.

Answer: C

Rationale: A Protection Profile defines security requirements independent of implementation, providing a reusable baseline for multiple evaluations.

Answer: D

Rationale: Once authenticated, FDE decrypts the disk, leaving data vulnerable to compromise while the user session remains active.

Answer: A

Rationale: The first step in reducing ICMP attack exposure is restricting inbound ICMP traffic using access control lists. IPS and egress controls are secondary measures.

Answer: C

Rationale: IAM platforms automate user provisioning, access certification, and review processes, improving efficiency and compliance.

Answer: B

Rationale: Forged SAML assertions allow attackers to impersonate users and gain unauthorized access across federated domains.

Answer: A

Rationale: Incremental assessments throughout development detect and address security issues early, reducing rework and deployment risks.

Answer: B

Rationale: The Content-Security-Policy (CSP) header provides granular control over script execution, allowing organizations to block inline JavaScript, eval(), and other unsafe scripting behaviors.

Answer: B

Rationale: Performance, environment, and interference determine optimal wireless spectrum selection and overall signal reliability.

Answer: A

Rationale: Open-source components often expose known vulnerabilities that attackers target, so continuous patching and monitoring are critical.

Answer: A

Rationale: Patches should first be tested in a lower or non-production environment to verify compatibility and prevent disruptions.

Answer: C

Rationale: The CIA triad embodies fundamental security principles ensuring that data remains confidential, accurate, and accessible.

Answer: D

Rationale: Documenting MTD demonstrates regulatory compliance and management accountability for business continuity readiness.

Answer: C

Rationale: Simple Power Analysis infers secrets by observing a device’s power consumption profile during cryptographic operations.

Answer: A

Rationale: Time synchronization across all log sources ensures accurate event correlation and forensic analysis in SIEM systems.

Answer: C

Rationale: TCP port 22 (used by SSH/SFTP) provides encrypted transfer channels ensuring secure data exchange with partners.

Answer: D

Rationale: Maximum Tolerable Downtime (MTD) is calculated as the sum of the Recovery Time Objective (RTO) and Work Recovery Time (WRT). RTO covers the restoration of IT systems, while WRT includes business process catch-up activities required before operations are fully functional.

Answer: C

Rationale: Modularity separates system components and data, minimizing interdependencies and containing potential compromise impacts.

Answer: D

Rationale: Combining biometric, password, and badge authentication layers creates robust multi-factor physical access protection.