Free CISSP Exam Dumps

No Installation Required, Instantly Prepare for the CISSP exam and please click the below link to start the CISSP Exam Simulator with a real CISSP practice exam questions.
Use directly our on-line CISSP exam dumps materials and try our Testing Engine to pass the CISSP which is always updated.

Exam Code: CISSP
Exam Title: Certified Information Systems Security Professional (CISSP)
Vendor: ISC2
Exam Questions: 994
Last Updated: December 18th,2024

Question 1

- (Exam Topic 13)
What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?

A. To ensure Information Technology (IT) staff knows and performs roles assigned to each of them
B. To validate backup sites’ effectiveness
C. To find out what does not work and fix it
D. To create a high level DRP awareness among Information Technology (IT) staff

Correct Answer:B

Question 2

- (Exam Topic 11)
Which of the following BEST describes a Protection Profile (PP)?

A. A document that expresses an implementation independent set of security requirements for an IT product that meets specific consumer needs.
B. A document that is used to develop an IT security product from its security requirements definition.
C. A document that expresses an implementation dependent set of security requirements which contains only the security functional requirements.
D. A document that represents evaluated products where there is a one-to-one correspondence between a PP and a Security Target (ST).

Correct Answer:A

Question 3

- (Exam Topic 10)
Which of the following is the MOST crucial for a successful audit plan?

A. Defining the scope of the audit to be performed
B. Identifying the security controls to be implemented
C. Working with the system owner on new controls
D. Acquiring evidence of systems that are not compliant

Correct Answer:A

Question 4

- (Exam Topic 12)
From a cryptographic perspective, the service of non-repudiation includes which of the following features?

A. Validity of digital certificates
B. Validity of the authorization rules
C. Proof of authenticity of the message
D. Proof of integrity of the message

Correct Answer:C

Question 5

- (Exam Topic 9)
Which of the following is a security limitation of File Transfer Protocol (FTP)?

A. Passive FTP is not compatible with web browsers.
B. Anonymous access is allowed.
C. FTP uses Transmission Control Protocol (TCP) ports 20 and 21.
D. Authentication is not encrypted.

Correct Answer:D