CISSP Practice Questions (841–860)

Answer: B

Rationale: Manual or automated code reviews help detect insecure coding practices and hidden logic that could enable backdoors.

Answer: D

Rationale: Logical network segmentation isolates systems, limiting an attacker’s ability to move laterally and capture data.

Answer: D

Rationale: Documenting processes clarifies interdependencies, enabling accurate impact analysis and effective recovery planning.

Answer: C

Rationale: Independent code certification ensures that software meets quality and security standards before delivery.

Answer: C

Rationale: Birthday attacks exploit hash collisions, making them particularly effective against cryptographic hash functions.

Answer: B

Rationale: Deep inspection in application filtering can slow throughput due to complex rule evaluations.

Answer: C

Rationale: Management authorization ensures testing is sanctioned, legal, and aligned with organizational objectives.

Answer: A

Rationale: Detection controls identify anomalies, such as unusually high transaction amounts, after they occur.

Answer: B

Rationale: Safe Harbor compliance requires contact details for individuals to correct or query their personal data.

Answer: D

Rationale: Knowing all systems and software versions is essential before deploying patches or assessing vulnerabilities.

Answer: A

Rationale: Assessments measure how effective security controls are at mitigating or preventing vulnerabilities.

Answer: C

Rationale: Standardizing controls across platforms ensures consistent protection and simplifies management in diverse environments.

Answer: C

Rationale: Social engineering manipulates individuals into divulging sensitive information by impersonation or deception.

Answer: B

Rationale: IPSec uses Internet Key Exchange (IKE) to negotiate and manage cryptographic keys between peers.

Answer: B

Rationale: The Change Control Board (CCB) authorizes all production changes to ensure proper governance, risk evaluation, and documentation.

Answer: C

Rationale: Testing verifies whether the plan functions as intended and can effectively restore operations during an actual disaster.

Answer: C

Rationale: PIR sensors must adjust for temperature fluctuations in uncontrolled environments to maintain detection accuracy.

Answer: D

Rationale: Security policies must be realistic and achievable to ensure compliance and effective implementation.

Answer: A

Rationale: When addressing executives, framing security as a business need with clear objectives gains their buy-in.

Answer: A

Rationale: Trojan malware often opens unauthorized ports to allow remote control or data exfiltration.