Practice Test GeeksCISSP - Certified Information Systems Security Professional Practice Test
← All CISSP Flashcard Decks

CISSP Flashcards

7 cards from real CISSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 CISSP flashcards as text

  1. Which security testing methodology involves testers having no prior knowledge of the target environment?

    Answer: Black-box testing

    Black-box testing simulates an external attacker with no internal knowledge, testing only what is publicly visible or accessible.

  2. What is the PRIMARY security concern with using shared credentials among multiple administrators?

    Answer: Inability to attribute actions to specific individuals for accountability

    Shared credentials eliminate individual accountability, making it impossible to audit which specific person performed administrative actions.

  3. Which of the following BEST describes 'data sovereignty'?

    Answer: The principle that data is subject to the laws of the country where it is stored

    Data sovereignty means that data stored in a particular country is subject to that nation's laws and regulations, which impacts cloud storage decisions.

  4. A security team uses honeypots on their network. What is the PRIMARY purpose?

    Answer: Detecting and studying attacker behavior without exposing real assets

    Honeypots are decoy systems designed to lure attackers, detect intrusion attempts, and gather threat intelligence without exposing production assets.

  5. Under the CISSP CBK, which domain covers the secure design principles including fail-safe defaults and economy of mechanism?

    Answer: Security Architecture and Engineering

    Security Architecture and Engineering covers secure design principles such as fail-safe defaults, least privilege, economy of mechanism, and open design.

  6. What does 'cross-site request forgery (CSRF)' exploit?

    Answer: The trust a web application has in an authenticated user's browser

    CSRF tricks an authenticated user's browser into sending unauthorized requests to a web application that trusts that browser's session.

  7. Which backup strategy copies only data that has changed since the LAST FULL backup, regardless of subsequent incremental backups?

    Answer: Differential backup

    A differential backup captures all changes since the last full backup, making restoration faster than incremental backups (only full + latest differential needed).