CISSP Practice Questions (761–780)

Answer: C

Rationale: VoIP requires stable IP routing and low latency; ensuring efficient IP lookups supports consistent packet delivery and service quality.

Answer: D

Rationale: Jurisdictional segregation allows compliance with multiple legal requirements by applying separate policies to each data class.

Answer: D

Rationale: Placing non-802.1x devices in a separate VLAN maintains network segmentation and reduces exposure to unauthorized access.

Answer: B

Rationale: NIST emphasizes adaptive, continuous risk management in dynamic environments, focusing on evolving threats and resilience.

Answer: C

Rationale: SOAR platforms aggregate and correlate data from multiple tools into a central system for analysis and automated response.

Answer: A

Rationale: After human safety, protecting critical data and hardware ensures business continuity and rapid recovery from disruptions.

Answer: B

Rationale: An SLA defines measurable commitments between a service provider and client, representing client expectations and requirements.

Answer: D

Rationale: Encapsulation protects internal object data and methods by restricting access through controlled interfaces, reducing attack surface and supporting defense-in-depth within software design. Polyinstantiation relates to multilevel secure databases, not object-oriented programming.

Answer: D

Rationale: Data Stewards are responsible for ensuring that data is used in accordance with organizational policies, quality standards, and regulatory requirements. Data Owners define data value and business rules, while Stewards enforce them operationally.

Answer: B

Rationale: Identifying key stakeholders is the first step so the right personnel are involved in defining objectives, scope, evaluation criteria, and responsibilities prior to DR/BCP testing.

Answer: D

Rationale: Preventing vulnerabilities in open-source components begins with maintaining an accurate software inventory. Without knowing what components exist, organizations cannot assess vulnerabilities or apply patches. A WAF may reduce exposure but does not address root cause prevention.

Answer: A

Rationale: Open design assumes system security should not depend on secrecy of design; instead, it relies on robust, transparent mechanisms.

Answer: D

Rationale: The main goal of a security assessment is to identify and remediate security gaps before exploitation or audit findings occur.

Answer: C

Rationale: Traffic filtering controls and restricts communication between virtual machines, limiting lateral movement and reducing attack surfaces within virtualized environments.

Answer: A

Rationale: MDM enables remote device wiping, ensuring data cannot be recovered from lost or stolen mobile devices.

Answer: B

Rationale: RSA allows asymmetric key management, ensuring different keys are used for encryption, reducing exposure of a single master key.

Answer: C

Rationale: IaaS provides the flexibility and resource elasticity necessary for scaling applications horizontally across distributed systems.

Answer: D

Rationale: Encrypting SAML or OIDC tokens ensures confidentiality and integrity during transmission, preventing interception or misuse.

Answer: B

Rationale: During the detection phase, incorrect OS identification leads to mismatched vulnerability checks and false findings.

Answer: C

Rationale: Proximate cause legally links the defendant’s negligence to the plaintiff’s damages, which must be proven for liability.