ISC Certified Information Systems Security Professional (CISSP) - CISSP Exam Practice Test

As a design principle, which one of the following actors is responsible for identifying and approving data security requirements in a cloud ecosystem?

Which of the following attacks is dependent upon the compromise of a secondary target in order to reach the primary target?

Which of the following BEST describes the purpose of an "Egress filtering" control on a firewall?

According to best practice, which of the following groups is the MOST effective in performing an information security compliance audit?

When reviewing vendor certifications for handling and processing of company data, which of the following is the BEST Service Organization Controls (SOC) certification for the vendor to possess?

Refer to the information below to answer the question.
In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files.

In a Bell-LaPadula system, which user has the MOST restrictions when writing data to any of the four files?

Which of the following entails identification of data end links to business processes, applications, and data stores as well as assignment of ownership responsibilities?

Which of the following BEST describes the purpose of Border Gateway Protocol (BGP)?

The Secure Shell (SSH) version 2 protocol supports.

What is the BEST approach to anonymizing personally identifiable information (PII) in a test environment?

Network-based logging has which advantage over host-based logging when reviewing malicious activity about a victim machine?

The Chief Information Security Officer (CISO) is concerned about business application availability. The organization was recently subject to a ransomware attack that resulted in the unavailability of applications and services for 10 working days that required paper-based running of all main business processes. There are now aggressive plans to enhance the Recovery Time Objective (RTO) and cater for more frequent data captures. Which of the following solutions should be implemented to fully comply to the new business requirements?

What steps can be taken to prepare personally identifiable information (PII) for processing by a third party?