Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 146–150 (page: 31)

Updated On: 9-Feb-2026

The Chief Information Security Officer (CISO) is to establish a single, centralized, and relational repository to hold all information regarding the software and hardware assets. Which of the following s ions would be the BEST option?

  1. Information Security Management System (ISMS)
  2. Configuration Management Database (CMDB)
  3. Security Information and Event Management (SIEM)
  4. Information Technology Asset Management (ITAM)

Answer(s): B



What type of investigation applies when malicious behavior is suspected between two organizations?

  1. Regulatory
  2. Operational
  3. Civil
  4. Criminal

Answer(s): C



Which of the following techniques evaluates the secure design principles of network or software architectures?

  1. Risk modeling
  2. Waterfall method
  3. Threat modeling
  4. Fuzzing

Answer(s): C



Which element of software supply chain management has the GREATEST security risk to organizations?

  1. Unsupported libraries are often used.
  2. Applications with multiple contributors are difficult to evaluate.
  3. Vulnerabilities are difficult to detect.
  4. New software development skills are hard to acquire.

Answer(s): A



Which of the following should be done at a disaster site before any item is removed, repaired, or replaced?

  1. Communicate with the press following the communications plan
  2. Dispatch personnel to the disaster recovery (DR) site
  3. Take photos of the damage
  4. Notify all of the Board of Directors

Answer(s): C



Viewing page 31 of 98
Viewing questions 151 - 155 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!