CISSP Readiness Test

10 questions, balanced across the exam's topics. Answer each one, then submit for your practice readiness estimate and per-topic breakdown. This is a practice estimate — not a prediction or guarantee of your official exam result.

Question 1

Full disk encryption protects against:

Phishing Malware Data exposure from lost or stolen devices Network attacks

Question 2

Which of the following is a preventive control?

Security guard patrol Firewall rule blocking malicious traffic Data backup Intrusion detection system

Question 3

An alternative to lockouts that preserves availability is:

Progressive delays or CAPTCHAs that slow attackers without denying legitimate users Longer passwords No authentication Biometrics only

Question 4

You must protect a certificate authority's root keys. What is the BEST key-protection approach?

Store the keys on the administrator's laptop Let one person generate and hold all keys Use software keystores on shared servers Generate keys in a FIPS 140-3 HSM via a witnessed key ceremony with split knowledge among custodians

Question 5

Purging differs from clearing in that purging:

Only deletes file pointers Applies solely to paper Uses laboratory-grade techniques to make data unrecoverable even with advanced methods Is weaker and faster

Question 6

Architecture risk analysis evaluates:

Code syntax Office layout Typing speed Security of the system design and trust boundaries

Question 7

User profiles render stored data that enables stored XSS attacks. What is the BEST remediation?

Encode input on the way in only Contextually output-encode all untrusted data and deploy Content Security Policy headers Strip <script> tags with regex Trust input from authenticated users

Question 8

At which OSI layer does Ethernet primarily operate?

All layers simultaneously Data Link (Layer 2) Physical (Layer 1) Network (Layer 3)

Question 9

Load balancers support availability by:

Writing code Encrypting traffic Storing data Distributing requests across healthy servers

Question 10

You are classifying unreleased financial results: their leak would move markets and breach regulations. What is the appropriate classification?

Classify it as Public Leave it unclassified Classify it as Restricted/Confidential Classify it as Internal

Unanswered questions count as incorrect. Your answers are graded on the server; no answer key is sent to your browser.

← Back to the CISSP page

About Contact Privacy Policy Terms of Service Refund Policy

Home Exams Simulations WorkTrials GameScope Account