Smartly Prepare Exam with Free Online CISSP Practice Test

We offer the latest CISSP practice test designed for free and effective online Certified Information Systems Security Professional certification preparation. It's a simulation of the real CISSP exam experience, built to help you understand the structure, complexity, and topics you'll face on exam day.

Question 1

Which of the following is the BEST method a security practitioner can use to ensure that systems and sub-system gracefully handle invalid input?

Options :

A : Negative testing

B : Integration testing

C : Unit testing

D : Acceptance testing

Answer: B

Question 2

Retaining system logs for six months or longer can be valuable for what activities?

Options :

A : Disaster recovery and business continuity

B : Forensics and incident response

C : Identity and authorization management

D : Physical and logical access control

Answer: B

Question 3

Functional security testing is MOST critical during which phase of the system development life cycle (SDLC)?

Options :

A : Operations / Maintenance

B : Implementation

C : Acquisition / Development

D : Initiation

Answer: B

Question 4

Refer to the information below to answer the question.

Desktop computers in an organization were sanitized for re-use in an equivalent security environment. The data was destroyed in accordance with organizational policy and all marking and other external indications of the sensitivity of the data that was formerly stored on the magnetic drives were removed.

Organizational policy requires the deletion of user data from Personal Digital Assistant (PDA) devices before disposal. It may not be possible to delete the user data if the device is malfunctioning. Which destruction method below provides the BEST assurance that the data has been removed?

Options :

A : Knurling

B : Grinding

C : Shredding

D : Degaussing

Answer: C

Question 5

When transmitting information over public networks, the decision to encrypt it should be based on

Options :

A : the estimated monetary value of the information.

B : whether there are transient nodes relaying the transmission.

C : the level of confidentiality of the information.

D : the volume of the information.

Answer: C