CISSP CISSP 5

Question 1

Which security testing methodology involves testers having no prior knowledge of the target environment?

Accepted Answer

Black-box testing

Answer

Black-box testing simulates an external attacker with no internal knowledge, testing only what is publicly visible or accessible.

Question 2

What is the PRIMARY security concern with using shared credentials among multiple administrators?

Accepted Answer

Inability to attribute actions to specific individuals for accountability

Answer

Shared credentials eliminate individual accountability, making it impossible to audit which specific person performed administrative actions.

Question 3

Which of the following BEST describes 'data sovereignty'?

Accepted Answer

The principle that data is subject to the laws of the country where it is stored

Answer

Data sovereignty means that data stored in a particular country is subject to that nation's laws and regulations, which impacts cloud storage decisions.

Question 4

A security team uses honeypots on their network. What is the PRIMARY purpose?

Accepted Answer

Detecting and studying attacker behavior without exposing real assets

Answer

Honeypots are decoy systems designed to lure attackers, detect intrusion attempts, and gather threat intelligence without exposing production assets.

Question 5

Under the CISSP CBK, which domain covers the secure design principles including fail-safe defaults and economy of mechanism?

Accepted Answer

Security Architecture and Engineering

Answer

Security Architecture and Engineering covers secure design principles such as fail-safe defaults, least privilege, economy of mechanism, and open design.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP CISSP 5