CISSP Exam Questions and Answers | Exam-Dumps (Page: 5)

QUESTION: 21

In the "Do" phase of the Plan-Do-Check-Act model, which of the following is performed?

Maintain and improve the Business Continuity Management (BCM) system by taking corrective action, based on the results of management review.
Monitor and review performance against business continuity policy and objectives, report the results to management for review, and determine and authorize actions for remediation and improvement.
Ensure the business continuity policy, controls, processes, and procedures have been implemented.
Ensure that business continuity policy, objectives, targets, controls, processes and procedures relevant to improving business continuity have been established.

Answer(s): C

QUESTION: 22

What industry-recognized document could be used as a baseline reference that is related to data security and business operations or conducting a security assessment?

Service Organization Control (SOC) 1 Type 2
Service Organization Control (SOC) 1 Type 1
Service Organization Control (SOC) 2 Type 2
Service Organization Control (SOC) 2 Type 1

Answer(s): D

Reveal Solution Next Question

QUESTION: 23

A criminal organization is planning an attack on a government network. Which of the following scenarios presents the HIGHEST risk to the organization?

Organization loses control of their network devices.
Network is flooded with communication traffic by the attacker.
Network management communications is disrupted.
Attacker accesses sensitive information regarding the network topology.

Answer(s): A

Reveal Solution Next Question

QUESTION: 24

Which reporting type requires a service organization to describe its system and define its control objectives and controls that are relevant to users' internal control over financial reporting?

Statement on Auditing Standards (SAS) 70
Service Organization Control 1 (SOC1)
Service Organization Control 2 (SOC2)
Service Organization Control 3 (SOC3)

Answer(s): B

Reveal Solution Next Question

QUESTION: 25

Which of the following is the BEST method to validate secure coding techniques against injection and overflow attacks?

Scheduled team review of coding style and techniques for vulnerability patterns
The regular use of production code routines from similar applications already in use
Using automated programs to test for the latest known vulnerability patterns
Ensure code editing tools are updated against known vulnerability patterns

Answer(s): C

Reveal Solution Next Question

ISC2 CISSP Exam (page: 5) ISC2 Certified Information Systems Security Professional (CISSP) Updated on: 12-Feb-2026

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

QUESTION: 25

ISC2 CISSP Exam (page: 5)
ISC2 Certified Information Systems Security Professional (CISSP)
Updated on: 12-Feb-2026