CISSP Security Operations 3

Question 1

Which security operations principle requires that no single individual can complete a sensitive transaction without the involvement of at least one other person?

Accepted Answer

Separation of duties

Answer

Separation of duties splits critical tasks among multiple people so that no one person can commit fraud or error without detection.

Question 2

An organization uses a honeynet to gather threat intelligence. Which is the GREATEST risk associated with this approach?

Accepted Answer

Attackers may use the honeynet as a pivot point to attack real systems

Answer

If a honeynet is not properly isolated, a compromised decoy system can serve as a launchpad for attacks against production systems.

Question 3

What is the role of an evidence custodian in a forensic investigation?

Accepted Answer

Maintaining and documenting the chain of custody for all evidence

Answer

The evidence custodian is responsible for the secure storage of evidence and ensuring the chain of custody is documented and unbroken.

Question 4

A company's BCP requires that critical systems be restored within 4 hours of a disaster. Which metric defines this requirement?

Accepted Answer

Recovery Time Objective (RTO)

Answer

The Recovery Time Objective (RTO) specifies the maximum acceptable duration for restoring a system or process after an outage.

Question 5

Which access control model is BEST suited for a military environment where data classification levels (Top Secret, Secret, Unclassified) govern information access?

Accepted Answer

Mandatory Access Control (MAC)

Answer

MAC enforces access based on data classification labels and subject clearance levels, making it ideal for environments with strict classification hierarchies.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Security Operations 3