Question 1

In software development, which type of queries should be used to prevent SQL injection?
A. Parameterized
B. Controlled
C. Dynamic
D. Static

Accepted Answer

Correct answer: A. Parameterized queries separate user input from SQL commands, preventing injection by disallowing execution of malicious inputs.

Question 2

Which type of access control allows only users meeting multiple attribute conditions (e.g., type=manager and department=sales)?
A. Role-based access control (RBAC)
B. Attribute-based access control (ABAC)
C. Discretionary access control (DAC)
D. Mandatory access control (MAC)

Accepted Answer

Correct answer: A. RBAC grants access based on predefined organizational roles that combine attributes such as job title and department.

Question 3

Which of the following BEST minimizes the attack surface for customer private information?
A. Data masking
B. Authentication
C. Obfuscation
D. Collection limitation

Accepted Answer

Correct answer: D. Collecting and retaining only essential data reduces exposure and risk in case of compromise, minimizing attack surface.

Question 4

Which evidence collection technique is used when a rootkit is suspected and rapid analysis is required?
A. Forensic disk imaging
B. Live response
C. Memory collection
D. Malware analysis

Accepted Answer

Correct answer: C. Memory collection captures volatile data, including active rootkits, enabling real-time analysis before it disappears on reboot.

Question 5

An auditor finds issues in the disaster recovery procedures of a third-party funds transfer application. Which report should be filed?
A. SAS 70-1
B. SAS 70
C. SOC 1
D. SOC 2

Accepted Answer

Correct answer: C. SOC 1 evaluates internal controls relevant to financial reporting and transactional processes such as fund transfers.

Question 6

Which of the following is a common component of big data environments?
A. Distributed storage locations
B. Centralized processing location
C. Distributed data collection
D. Consolidated data collection

Accepted Answer

Correct answer: C. Big data relies on distributed collection across multiple sources for scalability, redundancy, and parallel processing.

Question 7

A CISO is planning a cloud migration. What should be the FIRST consideration?
A. Analyze firm’s applications and data repositories to determine control requirements.
B. Request a third-party risk assessment.
C. Define the cloud migration roadmap and set application scope.
D. Ensure the contract defines shared security responsibilities.

Accepted Answer

Correct answer: C. A migration roadmap identifies which data and applications are moving to the cloud, guiding subsequent security planning.

Question 8

Which BEST describes the purpose of Border Gateway Protocol (BGP)?
A. Provide RIP version 2 advertisements to layer 3 devices.
B. Maintain a list of network paths between routers.
C. Provide firewall services to cloud applications.
D. Maintain a list of efficient network paths between autonomous systems.

Accepted Answer

Correct answer: D. BGP manages routing between autonomous systems, optimizing network path selection across the internet backbone.

Question 9

What is the BEST design for securing physical perimeter protection?
A. Closed-circuit television (CCTV)
B. Business continuity planning (BCP)
C. Barriers, fences, gates, and walls
D. Crime Prevention Through Environmental Design (CPTED)

Accepted Answer

Correct answer: D. CPTED integrates environmental and structural design principles to deter physical threats through natural surveillance and control.

Question 10

Which solution is MOST effective at discovering a successful network breach?
A. Developing a sandbox
B. Installing an intrusion detection system (IDS)
C. Deploying a honeypot
D. Installing an intrusion prevention system (IPS)

Accepted Answer

Correct answer: C. Honeypots attract and record attacker activity, revealing breach methods and confirming compromises effectively.

Question 11

Which is a benefit of implementing data-in-use controls?
A. Data must be decrypted to be opened.
B. When the data is being viewed, it can only be printed by authorized users.
C. Data in use is accessed through secure protocols.
D. Lost data cannot be accessed by unauthorized users.

Accepted Answer

Correct answer: B. Data-in-use controls restrict active data handling, ensuring only authorized users can manipulate or print data during access.

Question 12

When configuring EAP in a VoIP network, which authentication type is MOST secure?
A. PEAP
B. EAP-Transport Layer Security (TLS)
C. EAP-Tunneled TLS
D. EAP-Flexible Authentication via Secure Tunneling

Accepted Answer

Correct answer: B. EAP-TLS uses mutual certificate-based authentication, offering the highest level of protection against credential theft.

Question 13

Which is the BEST guideline to follow to avoid exposure of sensitive data?
A. Monitor mail servers for exfiltration.
B. Educate users about attacks.
C. Establish report parameters.
D. Store sensitive data only when necessary.

Accepted Answer

Correct answer: D. Minimizing data retention reduces exposure risk by limiting the amount of sensitive information available to attackers.

Question 14

An organization with divisions in the United States (US) and the United Kingdom (UK) processes data comprised of personal information belonging to subjects living in the European Union (EU) and in the US. Which data MUST be handled according to the privacy protections of General Data Protection Regulation (GDPR)?
A. Only the UK citizens’ data
B. Only the EU residents’ data
C. Only data processed in the UK
D. Only the EU citizens’ data

Accepted Answer

Correct answer: D. GDPR applies specifically to the personal data of EU citizens, regardless of where the processing takes place.

Question 15

What are the first two components of logical access control?
A. Authentication and availability
B. Authentication and identification
C. Identification and confidentiality
D. Confidentiality and authentication

Accepted Answer

Correct answer: B. The access control process begins with identification (claiming an identity) and authentication (verifying that identity).

Question 16

Which of the following is the MOST effective measure for dealing with rootkit attacks?
A. Restoring the system from the last backup
B. Finding and replacing the altered binaries with legitimate ones
C. Turning off unauthorized services and rebooting the system
D. Reinstalling the system from trusted sources

Accepted Answer

Correct answer: D. Rootkits compromise system-level functions; the only reliable remediation is to reinstall the system from trusted media.

Question 17

Which of the following is the FIRST requirement a data owner should consider before implementing a data retention policy?
A. Storage
B. Training
C. Legal
D. Business

Accepted Answer

Correct answer: C. Legal requirements dictate how long data must be retained and when it should be deleted; compliance comes before operational concerns.

Question 18

A new employee formally reported suspicious behavior to the organization security team. The report claims that someone not affiliated with the organization was inquiring about the member’s work location, length of employment, and building access controls. The employee’s reporting is MOST likely the result of which of the following?
A. Security engineering
B. Security awareness
C. Phishing
D. Risk avoidance

Accepted Answer

Correct answer: C. This situation describes a phishing or social engineering attempt — external probing for internal details to gain access.

Question 19

The disaster recovery (DR) process should always include:
A. periodic inventory review
B. financial data analysis
C. plan maintenance
D. periodic vendor review

Accepted Answer

Correct answer: A. Periodic inventory reviews ensure all critical hardware, software, and dependencies are properly identified for recovery.

Question 20

An organization has determined that its previous waterfall approach to software development is not keeping pace with business demands. To adapt to the rapid changes required for product delivery, the organization has decided to move towards an Agile software development and release cycle. In order to ensure the success of the Agile methodology, who is the MOST critical in creating acceptance criteria for each release?
A. Business customers
B. Software developers
C. Independent testers
D. Project managers

Accepted Answer

Correct answer: C. Independent testers play a key role in verifying acceptance criteria objectively, ensuring releases meet business and quality standards.

CISSP Practice Questions (621–640)

Question 621

Question 622

Question 623

Question 624

Question 625

Question 626

Question 627

Question 628

Question 629

Question 630

Question 631

Question 632

Question 633

Question 634

Question 635

Question 636

Question 637

Question 638

Question 639

Question 640