support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. ISC2
  4. CISSP

Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 191–195 (page: 40)

Updated On: 9-Feb-2026
Page 40 of 98
PDF with 484 Questions

Which of the following is an example of a vulnerability of full-disk encryption (FDE)?

  1. Data on the device cannot be restored from backup.
  2. Data on the device cannot be backed up.
  3. Data in transit has been compromised when the user has authenticated to the device.
  4. Data at rest has been compromised when the user has authenticated to the device.

Answer(s): D



What is the FIRST step in reducing the exposure of a network to Internet Control Message Protocol (ICMP) based attacks?

  1. Implement network access control lists (ACL).
  2. Implement an intrusion prevention system (IPS).
  3. Implement a web application firewall (WAF).
  4. Implement egress filtering at the organization's network boundary.

Answer(s): A



A large organization's human resources and security teams are planning on implementing technology to eliminate manual user access reviews and improve compliance. Which of the following options is MOST likely to resolve the issues associated with user access?

  1. Implement a Privileged Access Management (PAM) system.
  2. Implement a role-based access control (RBAC) system.
  3. Implement identity and access management (IAM) platform.
  4. Implement a single sign-on (SSO) platform.

Answer(s): C



A cloud service accepts Security Assertion Markup Language (SAML) assertions from users to exchange authentication and authorization data between security domains. However, an attacker was able to spoof a registered account on the network and query the SAML provider. What is the MOST common attack leveraged against this flaw?

  1. Attacker leverages SAML assertion to register an account on the security domain.
  2. Attacker forges requests to authenticate as a different user.
  3. Attacker exchanges authentication and authorization data between security domains.
  4. Attacker conducts denial-of-service (DoS) against the security domain by authenticating as the same user repeatedly.

Answer(s): B



An organization is implementing security review as part of system development. Which of the following is the BEST technique to follow?

  1. Perform incremental assessments.
  2. Engage a third-party auditing firm.
  3. Review security architecture.
  4. Conduct penetration testing.

Answer(s): A



  PDF
Viewing page 40 of 98
Viewing questions 196 - 200 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!