Online Access Free CISSP Practice Test

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

• A.Network
• B.Storage
• C.Application
• D.Power

Which of the following is a correct feature of a virtual local area network (VLAN)?

• A.Layer 3 routing is required to allow traffic from one VLAN to another.
• B.A VLAN segregates network traffic therefore information security is enhanced significantly.
• C.VLAN has certain security features such as where the devices are physically connected.
• D.There is no broadcast allowed within a single VLAN due to network segregation.

Refer to the information below to answer the question.
A large organization uses unique identifiers and requires them at the start of every system session. Application access is based on job classification. The organization is subject to periodic independent reviews of access controls and violations. The organization uses wired and wireless networks and remote access. The organization also uses secure connections to branch offices and secure backup and recovery strategies for selected information and processes.
Following best practice, where should the permitted access for each department and job classification combination be specified?

• A.Security standards
• B.Human resource standards
• C.Security procedures
• D.Human resource policy

Which of the following BEST describes the purpose of "Egress Point Data Loss Prevention for Generative AI Tools" in the workplace?

• A.Encrypting all output generated by AI tools
• B.A technique used exclusively to improve AI model accuracy
• C.Blocking all use of generative AI tools regardless of context
• D.Monitoring and controlling the submission of sensitive or confidential data into external generative AI tools (such as public chatbots), preventing inadvertent exposure of proprietary information to third-party AI providers

An employee receives a promotion that entities them to access higher-level functions on the company's accounting system, as well as keeping their access to the previous system that is no longer needed or applicable. What is the name of the process that tries to remove this excess privilege?

• A.Access certification
• B.Access provisioning
• C.Segregation of Duties (SoD)
• D.Access aggregation