ISC2 Certified in Cybersecurity: Pre and Post Course Assessment /CISSP Official ISC2 practice tests (All domains)/CISSP Official ISC2 practice tests (All domains)/CISSP Official ISC2 practice tests - Domain 1/CISSP Official ISC2 practice tests - Domain 2/

1. Continuously observing and evaluating the information system security controls during the system life cycle to determine whether changes have occurred that will negatively impact the system security" best describes which process in the certification and accreditation methodology? a. Continuous ...

1. What is the final step of a quantitative risk analysis? A. Determine asset value. B. Assess the annualized rate of occurrence. C. Derive the annualized loss expectancy. D. Conduct a it analysis. - Answer- D. The final step of a quantitative risk analysis is conducting a cost/benefit analys...

What is meant by non-repudiation? (D1, L1.1.1) - Answer- If a user does something, they can't later claim that they didn't do it. The concept of "secrecy" is most related to which foundational aspect of security? (D1, L1.1.1) - Answer- Confidentiality Siobhan is deciding whether to make a ...

What type of security training is specifically designed to educate employees about attack techniques? - Answer- capture the flag Linda's organization recently experienced a social engineering attack. The attacker called a help desk employee and persuaded her that she was a project manager on a t...

What is included in the Plan of Action and Milestones (POA&M) that is presented to the Authorizing Official (AO) as part of the initial authorization package? A. All items identified throughout the Risk Management Framework (RMF) process B. Only volatile findings that require prioritization in rem...

The process of verifying or proving the user's identification is known as: - Answer- Authentication Which of the following properties is NOT guaranteed by Digital Signatures? - Answer- Confidentiality Which of the following Cybersecurity concepts guarantees that information is accessible only...

Access Control Object - Answer- A passive entity that typically receives or contains some form of data. Access Control Subject - Answer- An active entity and can be any user, program, or process that requests permission to cause data to flow from an access control object to the access control sub...

1. Matthew is the security administrator for a consulting firm and must enforce access controls that restrict users' access based upon their previous activity. For example, once a consultant accesses data belonging to Acme Cola, a consulting client, they may no longer access data belonging to any o...

1. What is the final step of a quantitative risk analysis? A. Determine asset value. B. Assess the annualized rate of occurrence. C. Derive the annualized loss expectancy. D. Conduct a it analysis. - Answer- D. The final step of a quantitative risk analysis is conducting a cost/benefit analys...

1. Angela is an information security architect at a bank and has been assigned to ensure that transactions are secure as they traverse the network. She recommends that all transactions use TLS. What threat is she most likely attempting to stop, and what method is she using to protect against it? ...