support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. ISC2
  4. CISSP

Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 221–225 (page: 46)

Updated On: 9-Feb-2026
Page 46 of 98
PDF with 484 Questions

Which of the following protection is provided when using a Virtual Private Network (VPN) with Authentication Header (AH)?

  1. Sender non-repudiation
  2. Multi-factor authentication (MFA)
  3. Payload encryption
  4. Sender confidentiality

Answer(s): A



An organization contracts with a consultant to perform a System Organization Control (SOC) 2 audit on their internal security controls. An auditor documents a finding a related to an Application Programming Interface (API) performing an action that is not aligned with the scope or objective of the system. Which trust service principle would be MOST applicable in th is situation?

  1. Confidentiality
  2. Processing Integrity
  3. Security
  4. Availability

Answer(s): B



In which process MUST security be considered during the acquisition of new software?

  1. Request for proposal (RFP)
  2. Implementation
  3. Vendor selection
  4. Contract negotiation

Answer(s): A



Which of the following is the MAIN difference between a network-based firewall and a host-based firewall?

  1. A network-based firewall is stateful, while a host-based firewall is stateless.
  2. A network-based firewall blocks network intrusions, while a host-based firewall blocks malware.
  3. A network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device.
  4. A network-based firewall verifies network traffic, while a host-based firewall verifies processes and applications.

Answer(s): C



Which of the following measures serves as the BEST means for protecting data on computers, smartphones, and external storage devices when traveling to high- risk countries?

  1. Review applicable destination country laws, forensically clean devices prior to travel, and only download sensitive data over a virtual private network (VPN) upon arriving at the destination.
  2. Leverage a Secure Socket Layer (SSL) connection over a virtual private network (VPN) to download sensitive data upon arriving at the destination.
  3. Keep laptops, external storage devices, and smartphones in the hotel room when not in use.
  4. Use multi-factor authentication (MFA) to gain access to data stored on laptops or external storage devices and biometric fingerprint access control mechanisms to unlock smartphones.

Answer(s): D



  PDF
Viewing page 46 of 98
Viewing questions 226 - 230 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!