8 practice questions for each of the 8 CISSP domains.
Here are 8 short practice questions for each of the 8 CISSP domains.
Domain 1: Security and Risk Management
Q: A company enforces mandatory vacation and job rotation policies. What type of control is this?
A) Physical
B) Technical
C) Administrative
D) Preventive
Domain 2: Asset Security
Q: Which method provides the most secure destruction of sensitive printed documents?
A) Recycling
B) Burning
C) Shredding
D) Deleting
Domain 3: Security Architecture and Engineering
Q: Which cryptographic concept ensures a message has not been altered?
A) Confidentiality
B) Non-repudiation
C) Availability
D) Integrity
Domain 4: Communication and Network Security
Q: Which of the following is a Layer 3 protocol?
A) TCP
B) IP
C) HTTP
D) ARP
Domain 5: Identity and Access Management (IAM)
Q: A company uses smart cards for authentication. What type of authentication factor is this?
A) Something you are
B) Something you have
C) Something you know
D) Somewhere you are
Domain 6: Security Assessment and Testing
Q: Which test would be best to verify secure coding practices in development?
A) Functional test
B) Static code analysis
C) Dynamic analysis
D) Penetration test
Domain 7: Security Operations
Q: During which incident response phase is the root cause investigated?
A) Containment
B) Eradication
C) Recovery
D) Lessons Learned
Domain 8: Software Development Security
Q: Which of the following is a common software vulnerability?
A) Data remanence
B) Cross-site scripting
C) Role-based access
D) Port scanning
3
4 comments
Fouad Ahmed
6
8 practice questions for each of the 8 CISSP domains.
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by