SANS 515 CERTIFICATION SCRIPT 2026 QUESTIONS WITH
SOLUTIONS GRADED A+
● Glen is an (ISC)² member. Glen receives an email from a company offering a set of
answers for an (ISC)² certification exam. What should Glen do?. Answer: Inform (ISC)²
● Zarma is an (ISC)² member and a security analyst for Triffid Corporation. One of
Zarma's colleagues is interested in getting an (ISC)2 certification and asks Zarma what
the test questions are like. What should Zarma do?. Answer: Explain the style and format
of the questions, but no detail
● A system that collects transactional information and stores it in a record in order to
show which users performed which actions is an example of providing. Answer:
Non-repudiation
● The city of Grampon wants to ensure that all of its citizens are protected from
malware, so the city council creates a rule that anyone caught creating and launching
malware within the city limits will receive a fine and go to jail. What kind of rule is this?.
Answer: Law
● The Payment Card Industry (PCI) Council is a committee made up of representatives
from major credit card providers (Visa, Mastercard, American Express) in the United
States. The PCI Council issues rules that merchants must follow if the merchants
choose to accept payment via credit card. These rules describe best practices for
securing credit card processing technology, activities for securing credit card
information, and how to protect customers' personal data. This set of rules is a _____..
Answer: Standard
● Tina is an (ISC)² member and is invited to join an online group of IT security
enthusiasts. After attending a few online sessions, Tina learns that some participants
in the group are sharing malware with each other, in order to use it against other
organizations online. What should Tina do?. Answer: Stop participating in the group
● Which of the following probably poses the most risk?. Answer: A high-likelihood,
high-impact event
● Druna is a security practitioner tasked with ensuring that laptops are not stolen from
the organization's offices. Which sort of security control would probably be best for
, this purpose?. Answer: Physical
● Aphrodite is a member of (ISC)² and a data analyst for Triffid Corporation. While
Aphrodite is reviewing user log data, Aphrodite discovers that another Triffid employee
is violating the acceptable use policy and watching streaming videos during work
hours. What should Aphrodite do?. Answer: Inform Triffid management
● Preenka works at an airport. There are red lines painted on the ground next to the
runway; Preenka has been instructed that nobody can step or drive across a red line
unless they request, and get specific permission from, the control tower. This is an
example of a(n)______ control.. Answer: Administrative
● The Triffid document is a ______, and the SANS documents are ________.. Answer:
Policy, standard
● Which of the following is an example of a "something you are" authentication
factor?. Answer: A photograph of your face
● For which of the following assets is integrity probably the most important security
aspect?. Answer: The file that contains passwords used to authenticate users
● Triffid Corporation has a rule that all employees working with sensitive hardcopy
documents must put the documents into a safe at the end of the workday, where they
are locked up until the following workday. What kind of control is the process of
putting the documents into the safe?. Answer: Administrative
● For which of the following systems would the security concept of availability
probably be most important?. Answer: Medical systems that monitor patient condition in an
intensive care unit
● A bollard is a post set securely in the ground in order to prevent a vehicle from
entering an area or driving past a certain point. Bollards are an example of ______
controls.. Answer: Physical
● A software firewall is an application that runs on a device and prevents specific
types of traffic from entering that device. This is a type of ________ control.. Answer:
Technical
● Sophia is visiting Las Vegas and decides to put a bet on a particular number on a
roulette wheel. This is an example of _________.. Answer: Acceptance
SOLUTIONS GRADED A+
● Glen is an (ISC)² member. Glen receives an email from a company offering a set of
answers for an (ISC)² certification exam. What should Glen do?. Answer: Inform (ISC)²
● Zarma is an (ISC)² member and a security analyst for Triffid Corporation. One of
Zarma's colleagues is interested in getting an (ISC)2 certification and asks Zarma what
the test questions are like. What should Zarma do?. Answer: Explain the style and format
of the questions, but no detail
● A system that collects transactional information and stores it in a record in order to
show which users performed which actions is an example of providing. Answer:
Non-repudiation
● The city of Grampon wants to ensure that all of its citizens are protected from
malware, so the city council creates a rule that anyone caught creating and launching
malware within the city limits will receive a fine and go to jail. What kind of rule is this?.
Answer: Law
● The Payment Card Industry (PCI) Council is a committee made up of representatives
from major credit card providers (Visa, Mastercard, American Express) in the United
States. The PCI Council issues rules that merchants must follow if the merchants
choose to accept payment via credit card. These rules describe best practices for
securing credit card processing technology, activities for securing credit card
information, and how to protect customers' personal data. This set of rules is a _____..
Answer: Standard
● Tina is an (ISC)² member and is invited to join an online group of IT security
enthusiasts. After attending a few online sessions, Tina learns that some participants
in the group are sharing malware with each other, in order to use it against other
organizations online. What should Tina do?. Answer: Stop participating in the group
● Which of the following probably poses the most risk?. Answer: A high-likelihood,
high-impact event
● Druna is a security practitioner tasked with ensuring that laptops are not stolen from
the organization's offices. Which sort of security control would probably be best for
, this purpose?. Answer: Physical
● Aphrodite is a member of (ISC)² and a data analyst for Triffid Corporation. While
Aphrodite is reviewing user log data, Aphrodite discovers that another Triffid employee
is violating the acceptable use policy and watching streaming videos during work
hours. What should Aphrodite do?. Answer: Inform Triffid management
● Preenka works at an airport. There are red lines painted on the ground next to the
runway; Preenka has been instructed that nobody can step or drive across a red line
unless they request, and get specific permission from, the control tower. This is an
example of a(n)______ control.. Answer: Administrative
● The Triffid document is a ______, and the SANS documents are ________.. Answer:
Policy, standard
● Which of the following is an example of a "something you are" authentication
factor?. Answer: A photograph of your face
● For which of the following assets is integrity probably the most important security
aspect?. Answer: The file that contains passwords used to authenticate users
● Triffid Corporation has a rule that all employees working with sensitive hardcopy
documents must put the documents into a safe at the end of the workday, where they
are locked up until the following workday. What kind of control is the process of
putting the documents into the safe?. Answer: Administrative
● For which of the following systems would the security concept of availability
probably be most important?. Answer: Medical systems that monitor patient condition in an
intensive care unit
● A bollard is a post set securely in the ground in order to prevent a vehicle from
entering an area or driving past a certain point. Bollards are an example of ______
controls.. Answer: Physical
● A software firewall is an application that runs on a device and prevents specific
types of traffic from entering that device. This is a type of ________ control.. Answer:
Technical
● Sophia is visiting Las Vegas and decides to put a bet on a particular number on a
roulette wheel. This is an example of _________.. Answer: Acceptance
