Under the General Data Protection Regulation (GDPR), what is the maximum amount of time allowed for reporting a personal data breach?
Answer(s): C
A financial organization that works according to agile principles has developed a new application for their external customer base to request a line of credit. A security analyst has been asked to assess the security risk of the minimum viable product (MVP). Which is the MOST important activity the analyst should assess?
Answer(s): D
An application developer receives a report back from the security team showing their automated tools were able to successfully enter unexpected data into the organization's customer service portal, causing the site to crash. This is an example of which type of testing?
Which of the following is the MOST effective strategy to prevent an attacker from disabling a network?
What is the FIRST step that should be considered in a Data Loss Prevention (DLP) program?
Share your comments for ISC2 CISSP exam with other users:
A and D are True
good one with explanation
This is one of the most useful study guides I have ever used.
Keeping this site free takes real effort. We constantly battle automated scraping and unauthorized content copying. A quick account helps us protect the community and keep the site free.
To continue studying for your CISSP, please sign in or create a free account.