CISSP CISSP 3

Question 1

Which disaster recovery strategy involves maintaining a fully equipped and operational duplicate facility?

Accepted Answer

Hot site

Answer

A hot site is a fully operational duplicate data center that can take over immediately with near-zero recovery time.

Question 2

What does the 'separation of duties' control primarily prevent?

Accepted Answer

Single individuals from completing high-risk transactions alone

Answer

Separation of duties divides critical tasks among multiple people to prevent any single individual from committing fraud or error undetected.

Question 3

A developer implements input validation only on the client side. What is the MAIN security risk?

Accepted Answer

Attackers can bypass client-side controls and send malicious input directly

Answer

Client-side validation can be bypassed by intercepting and modifying requests, so server-side validation is essential for security.

Question 4

Which of the following BEST describes a 'rainbow table' attack?

Accepted Answer

Using precomputed hash values to reverse password hashes

Answer

A rainbow table attack uses precomputed tables of hash values to quickly look up the plaintext corresponding to a stolen password hash.

Question 5

Under GDPR, what is the maximum timeframe to notify supervisory authorities of a personal data breach?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires controllers to notify the supervisory authority within 72 hours of becoming aware of a personal data breach.

CISSP - Certified Information Systems Security Professional Practice Test