Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 156–160 (page: 33)

Updated On: 9-Feb-2026

The Chief Information Security Officer (CISO) of a small organization is making a case for building a security operations center (SOC). While debating between an in-house, fully outsourced, or a hybrid capability, which of the following would be the MAIN consideration, regardless of the model?

  1. Headcount and capacity
  2. Scope and service catalog
  3. Skill set and training
  4. Tools and technologies

Answer(s): B



An organization would like to ensure that all new users have a predefined departmental access template applied upon creation. The organization would also like additional access for users to be granted on a per-project basis. What type of user access administration is BEST suited to meet the organization's needs?

  1. Decentralized
  2. Hybrid
  3. Centralized
  4. Federated

Answer(s): B



Which of the following is a secure design principle for a new product?

  1. Restrict the use of modularization.
  2. Do not rely on previously used code.
  3. Build in appropriate levels of fault tolerance.
  4. Utilize obfuscation whenever possible.

Answer(s): C



What is the PRIMARY benefit of relying on Security Content Automation Protocol (SCAP)?

  1. Standardize specifications between software security products.
  2. Achieve organizational compliance with international standards.
  3. Improve vulnerability assessment capabilities.
  4. Save security costs for the organization.

Answer(s): A



What are the three key benefits that application developers should derive from the northbound application programming interface (API) of software defined networking (SDN)?

  1. Network syntax, abstraction of network flow, and abstraction of network protocols
  2. Network syntax, abstraction of network commands, and abstraction of network protocols
  3. Familiar syntax, abstraction of network topology, and definition of network protocols
  4. Familiar syntax, abstraction of network topology, and abstraction of network protocols

Answer(s): D



Viewing page 33 of 98
Viewing questions 161 - 165 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!