Question 1Security governance principles
A manufacturer is selling one of its divisions, and the division's staff will move to the buyer next month. Which action is MOST important for the seller's security team as the sale closes?
Get ready for the CISSP exam, one domain at a time.
The only interactive course with a tutor that finds your weak spots and fixes them.
Full refund within 14 days, for any reason.
I can't tell what the question is asking
Manager-level scenario questions come with every answer explained, so you learn how to read them.
I know the concepts but keep failing
A domain diagnostic finds the weak domains, then lessons and full 150-question practice exams close the gaps.
The answer explanations are too thin
Every practice answer is explained, and lessons teach each domain's reasoning.
Free risk calculation drill
SLE, ARO and ALE, with the working shown. Safeguard questions are on the full drill page.
Work it out, then check.
More free tools
The eight domains
An adaptive exam of 100 to 150 items in up to 3 hours.
1. Security and Risk Management
16% of the exam
2. Asset Security
10% of the exam
3. Security Architecture and Engineering
13% of the exam
4. Communication and Network Security
13% of the exam
5. Identity and Access Management
13% of the exam
6. Security Assessment and Testing
12% of the exam
7. Security Operations
13% of the exam
8. Software Development Security
10% of the exam
Try one question from each domain
Question 2Data lifecycle
Corbin Mutual uses an outside vendor to destroy retired drives that held customer data. An auditor asks for evidence that each drive was actually destroyed. What is the BEST evidence to obtain from the vendor?
Question 3Cryptographic solutions
A bank's master encryption key must be loaded into a new hardware module. Policy says no single employee may ever know the whole key. Which practice BEST meets this policy?
Question 4Securing network components
A company is installing its first inline IPS in front of an order processing system. Leadership worries that false positives could block real customer orders. What is the BEST deployment approach?
Question 5Identity and access provisioning lifecycle
An audit at Wexley Insurance finds that long-serving staff have kept access from every job they have held. What is the MOST effective long-term fix?
Question 6Analyzing test output and reporting
A system owner asks for a one-year exception from the requirement to encrypt a legacy database, offering network isolation as a compensating control. Who should approve the exception?
Question 7Incident management
At 2 a.m. the on-call responder at Thornbury Water receives an IDS alert about a possible intrusion into the billing network. What should the responder do FIRST?
Question 8Secure coding guidelines and standards
A developer adds detailed logging to a payment API to help troubleshoot failures. The security manager reviews the logging design. Which data should the logs NOT contain?
In the course
- 27 interactive lessons
- 338 practice questions
- 2 full 150-question, 3-hour practice exams
A security path: Network+, Security+, then this course
ISC2 lets Security+ count for one of the five years of experience the CISSP needs.
Guides
Security Leader Genius Pro
US$149one payment
- 27 interactive lessons
- 338 practice questions
- 2 full 150-question practice exams
- 3 free tools
Full refund within 14 days, for any reason. Terms
By paying you agree to our Terms. Email us within 14 days for a full refund.
Take the free diagnostic firstOne payment. No sales tax is added. Access until October 31, 2027.
Questions? support@unigenius.co.uk