CISSP Certification Exam Questions with AI Explanations

QUESTION: 76

An international organization has decided to use a Software as a Service (SaaS) solution to support its business operations. Which of the following compliance standards should the organization use to assess the international code security and data privacy of the solution?

Service Organization Control (SOC) 2
Information Assurance Technical Framework (IATF)
Health Insurance Portability and Accountability Act (HIPAA)
Payment Card Industry (PCI)

Answer(s): A

Reveal Solution Next Question

QUESTION: 77

An authentication system that uses challenge and response was recently implemented on an organization's network, because the organization conducted an annual penetration test showing that testers were able to move laterally using authenticated credentials. Which attack method was MOST likely used to achieve this?

Hash collision
Pass the ticket
Brute force
Cross-Site Scripting (XSS)

Answer(s): B

Reveal Solution Next Question

QUESTION: 78

Which of the following would qualify as an exception to the "right to be forgotten" of the General Data Protection Regulation (GDPR)?

For the establishment, exercise, or defense of legal claims
The personal data has been lawfully processed and collected
For the reasons of private interest
The personal data remains necessary to the purpose for which it was collected

Answer(s): A

Reveal Solution Next Question

QUESTION: 79

Dumpster diving is a technique used in which stage of penetration testing methodology?

Attack
Reporting
Planning
Discovery

Answer(s): D

Reveal Solution Next Question

QUESTION: 80

Which of the following is performed to determine a measure of success of a security awareness training program designed to prevent social engineering attacks?

Employee evaluation of the training program
Internal assessment of the training program's effectiveness
Multiple choice tests to participants
Management control of reviews

Answer(s): B

Reveal Solution Next Question

ISC2 Certified Information Systems Security Professional (CISSP) CISSP Dumps in PDF

Free ISC2 CISSP Real Questions (page: 16)

QUESTION: 76

QUESTION: 77

QUESTION: 78

QUESTION: 79

QUESTION: 80