Free CISSP Exam Braindumps
Certified Information Systems Security Professional (CISSP) Questions 241–245 (page: 50)

Updated On: 9-Feb-2026

An organization with divisions in the United States (US) and the United Kingdom (UK) processes data comprised of personal information belonging to subjects living in the European Union (EU) and in the US. Which data MUST be handled according to the privacy protections of General Data Protection Regulation (GDPR)?

  1. Only the UK citizens' data
  2. Only the EU residents' data
  3. Only data processed in the UK
  4. Only the EU citizens' data

Answer(s): B



What are the first two components of logical access control?

  1. Authentication and availability
  2. Authentication and identification
  3. Identification and confidentiality
  4. Confidentiality and authentication

Answer(s): B



Which of the following is the MOST effective measure for dealing with rootkit attacks?

  1. Restoring the system from the last backup
  2. Finding and replacing the altered binaries with legitimate ones
  3. Turning off unauthorized services and rebooting the system
  4. Reinstalling the system from trusted sources

Answer(s): D



Which of the following is the FIRST requirement a data owner should consider before implementing a data retention policy?

  1. Storage
  2. Training
  3. Legal
  4. Business

Answer(s): C



A new employee formally reported suspicious behavior to the organization security team. The report claims that someone not affiliated with the organization was inquiring about the member's work location, length of employment, and building access controls. The employee's reporting is MOST likely the result of which of the following?

  1. Security engineering
  2. Security awareness
  3. Phishing
  4. Risk avoidance

Answer(s): B



Viewing page 50 of 98
Viewing questions 246 - 250 out of 484 questions


Post your Comments and Discuss ISC2 CISSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!