CISSP Exam Questions and Answers | Exam-Dumps (Page: 6)

QUESTION: 26

When resolving ethical conflicts, the information security professional MUST consider many factors. In what order should the considerations be prioritized?

Public safety, duties to individuals, duties to the profession, and duties to principals
Public safety, duties to principals, duties to the profession, and duties to individuals
Public safety, duties to principals, duties to individuals, and duties to the profession
Public safety, duties to the profession, duties to principals, and duties to individuals

Answer(s): C

Reveal Solution Next Question

QUESTION: 27

Which service management process BEST helps information technology (IT) organizations with reducing cost, mitigating risk, and improving customer service?

Kanban
Lean Six Sigma
Information Technology Service Management (ITSM)
Information Technology Infrastructure Library (ITIL)

Answer(s): D

Reveal Solution Next Question

A company is attempting to enhance the security of its user authentication processes. After evaluating several options, the company has decided to utilize Identity as a Service (IDaaS). Which of the following factors leads the company to choose an IDaaS as their solution?

In-house team lacks resources to support an on-premise solution.
Third-party solutions are inherently more secure.
Third-party solutions are known for transferring the risk to the vendor.
In-house development provides more control.

Answer(s): A

Reveal Solution Next Question

QUESTION: 29

An organization recently suffered from a web-application attack that resulted in stolen user session cookie information. The attacker was able to obtain the information when a user's browser executed a script upon visiting a compromised website. What type of attack MOST likely occurred?

SQL injection (SQLi)
Extensible Markup Language (XML) external entities
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)

Answer(s): C

Reveal Solution Next Question

QUESTION: 30

An attack utilizing social engineering and a malicious Uniform Resource Locator (URL) link to take advantage of a victim's existing browser session with a web application is an example of which of the following types of attack?

Clickjacking
Cross-site request forgery (CSRF)
Cross-Site Scripting (XSS)
Injection

Answer(s): B

Reveal Solution Next Question

ISC2 CISSP Exam (page: 6)
ISC2 Certified Information Systems Security Professional (CISSP)
Updated on: 15-Feb-2026

QUESTION: 26

QUESTION: 27

QUESTION: 28

QUESTION: 29

QUESTION: 30

ISC2 CISSP Exam (page: 6) ISC2 Certified Information Systems Security Professional (CISSP) Updated on: 15-Feb-2026

QUESTION: 26

QUESTION: 27

QUESTION: 28

QUESTION: 29

QUESTION: 30

ISC2 CISSP Exam (page: 6)
ISC2 Certified Information Systems Security Professional (CISSP)
Updated on: 15-Feb-2026