Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 131–135 (page: 28)

Updated On: 9-Feb-2026

Which of the following vulnerabilities can be BEST detected using automated analysis?

  1. Multi-step process attack vulnerabilities
  2. Business logic flaw vulnerabilities
  3. Valid cross-site request forgery (CSRF) vulnerabilities
  4. Typical source code vulnerabilities

Answer(s): D



A project manager for a large software firm has acquired a government contract that generates large amounts of Controlled Unclassified Information (CUI). The organization's information security manager had received a request to transfer project-related CUI between systems of differing security classifications. What role provides the authoritative guidance for this transfer?

  1. PM
  2. Information owner
  3. Data Custodian
  4. Mission/Business Owner

Answer(s): B



Which of the following determines how traffic should flow based on the status of the infrastructure layer?

  1. Control plane
  2. Application plane
  3. Traffic plane
  4. Data plane

Answer(s): A



When testing password strength, which of the following is the BEST method for brute forcing passwords?

  1. Conduct an offline attack on the hashed password information.
  2. Use a comprehensive list of words to attempt to guess the password.
  3. Use social engineering methods to attempt to obtain the password.
  4. Conduct an online password attack until the account being used is locked.

Answer(s): A



Which of the following is the name of an individual or group that is impacted by a change?

  1. Change agent
  2. End User
  3. Stakeholder
  4. Sponsor

Answer(s): B



Viewing page 28 of 98
Viewing questions 136 - 140 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!