Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 226–230 (page: 47)

Updated On: 9-Feb-2026

When network management is outsourced to third parties, which of the following is the MOST effective method of protecting critical data assets?

  1. Confirm that confidentiality agreements are signed
  2. Employ strong access controls
  3. Log all activities associated with sensitive systems
  4. Provide links to security policies

Answer(s): B



Which of the following regulations dictates how data breaches are handled?

  1. Payment Card Industry Data Security Standard (PCI-DSS)
  2. National Institute of Standards and Technology (NIST)
  3. Sarbanes-Oxley (SOX)
  4. General Data Protection Regulation (GDPR)

Answer(s): D



In software development, developers should use which type of queries to prevent a Structured Query Language (SQL) injection?

  1. Parameterised
  2. Controlled
  3. Dynamic
  4. Static

Answer(s): A



Which type of access control includes a system that allows only users that are type=managers and department=sales to access employee records?

  1. Role-based access control (RBAC)
  2. Attribute-based access control (ABAC)
  3. Discretionary access control (DAC)
  4. Mandatory access control (MAC)

Answer(s): B



Which of the following examples is BEST to minimize the attack surface for a customer's private information?

  1. Data masking
  2. Authentication
  3. Obfuscation
  4. Collection limitation

Answer(s): D



Viewing page 47 of 98
Viewing questions 231 - 235 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!