CISSP EXAM CRAM COMPLETE STUDY
GUIDE 2026 | PRACTICE QUESTIONS &
ANSWERS (ALL DOMAINS)
| GRADED A+ | GUARANTEED SUCCESS
Updated 2026 Questions and Answers
100% Verified Exam Prep and Comprehensive
Rationales Included
,COBIT is a framework to help provide governance and assurance.
Gregg, Michael. CISSP Exam Cram (Kindle Location 1292). Pearson Education.
Kindle Edition.
SAN "a data storage system consisting of various storage elements, storage devices,
computer systems, and/or appliances, plus all the control software, all
communicating in efficient harmony over a network." A SAN appears to the client
OS as a local disk or volume that is available to be formatted and used locally as
needed.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1324-1327). Pearson
Education. Kindle Edition.
Military Data Classification Top Secret
Secret
Sensitive but Unclassified
Unclassified or Official
Private Data Classification Confidential
Private
Sensitive
Public
ISO 27001 This standard describes requirements on how to establish, implement, operate,
monitor, review, and maintain an information security management system (ISMS);
it is based on British Standard 7799.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1806-1808). Pearson
Education. Kindle Edition.
ISO 27002 This standard is considered a code of practice that describes ways to develop a
security program within the organization.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1808-1810). Pearson
Education. Kindle Edition.
ISO 27004 ISO standard for security management
ISO 27003 ISO standard focused on implementation
ISO 27799 ISO standard focused on personal health info
,ISO 27005 ISO standard on how to implement solutions based upon risk management
FISMA Federal Info Security Management Act brought about a set of clear guidelines for
Info Security designed for protection of government IT and data
GLBA Gramm-Leach-Bliley Act resulted in the most sweeping overhaul of financial
services regulation in the United States.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1750-1751). Pearson
Education. Kindle Edition.
Link Encryption encryption—The data is encrypted through the entire communication path.
Because all header information is encrypted each node must decrypt and encrypt
the routing information. Source and destination address cannot be seen to
someone sniffing traffic.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1686-1689). Pearson
Education. Kindle Edition.
End-to-End Encryption Generally performed by the end user and as such can pass through each node
without further processing. However, source and destination addresses are
passed in clear text, so they can be seen to someone sniffing traffic.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1689-1691). Pearson
Education. Kindle Edition.
Pod Slurping a technique for illicitly downloading or copying data from a computer. Typically
used for data exfiltration.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1612-1614). Pearson
Education. Kindle Edition.
TPM the trusted platform module (TPM) chip. The TPM is a "slow" cryptographic
hardware processor which can be used to provide a greater level of security than
software encryption. A TPM chip installed on the motherboard of a client
computer can also be used for system state authentication. The TPM can also be
used to store the encryption keys.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1619-1622). Pearson
Education. Kindle Edition.
, SED Self-Encrypting Drives: Compliance—SEDs have the ability to offer built-in
encryption. This can help with compliance laws that many organizations must
adhere to. Strong security—SEDs make use of strong encryption. The contents of
an SED are always encrypted and the encryption keys are themselves encrypted
and protected in hardware. Ease of use—Users only have to authenticate to the
drive when the device boots up or when they change passwords/credentials. The
encryption is not visible to the user. Performance—As SEDs are not visible to the
user and are integrated into hardware, the system operates at full performance
with no impact on user productivity.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1636-1643). Pearson
Education. Kindle Edition.
DCMA Digital Millenium Copyright Act makes it a crime to bypass anti-piracy controls on
software
ISO 9001 a quality management standard that has widespread support and attention. ISO
9001 describes how production processes are to be managed and reviewed. It is
not a standard of quality; it is about how well a system or process is documented.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1816-1817). Pearson
Education. Kindle Edition.
CPTED is Crime Prevention Through Environmental Design (CPTED). The benefits of
CPTED include the following: Natural access control Natural surveillance
Territorial reinforcement. The effect of CPTED is that it causes the criminal to feel
an increase in the threat of being discovered and provides natural surveillance
that can serve as a physical deterrent control.
What is the height of a fence to prevent a determined 8 feet high or higher
intruder?
What is the height of a fence considered for casual 3-4 ft for casual, 6-7 for too tall
deterrence versus too tall to easily climb
Mantrap is used to prevent piggybacking and additional layers of defense can be obtained
by using guards and CCTV.
Name the 3 types of locks Grade 3: residential/consumer
Grade 2: light-duty and heavy-duty residential
Grade 1: High-security
What replaced Halon? FM-200, CEA-410, Argon
GUIDE 2026 | PRACTICE QUESTIONS &
ANSWERS (ALL DOMAINS)
| GRADED A+ | GUARANTEED SUCCESS
Updated 2026 Questions and Answers
100% Verified Exam Prep and Comprehensive
Rationales Included
,COBIT is a framework to help provide governance and assurance.
Gregg, Michael. CISSP Exam Cram (Kindle Location 1292). Pearson Education.
Kindle Edition.
SAN "a data storage system consisting of various storage elements, storage devices,
computer systems, and/or appliances, plus all the control software, all
communicating in efficient harmony over a network." A SAN appears to the client
OS as a local disk or volume that is available to be formatted and used locally as
needed.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1324-1327). Pearson
Education. Kindle Edition.
Military Data Classification Top Secret
Secret
Sensitive but Unclassified
Unclassified or Official
Private Data Classification Confidential
Private
Sensitive
Public
ISO 27001 This standard describes requirements on how to establish, implement, operate,
monitor, review, and maintain an information security management system (ISMS);
it is based on British Standard 7799.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1806-1808). Pearson
Education. Kindle Edition.
ISO 27002 This standard is considered a code of practice that describes ways to develop a
security program within the organization.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1808-1810). Pearson
Education. Kindle Edition.
ISO 27004 ISO standard for security management
ISO 27003 ISO standard focused on implementation
ISO 27799 ISO standard focused on personal health info
,ISO 27005 ISO standard on how to implement solutions based upon risk management
FISMA Federal Info Security Management Act brought about a set of clear guidelines for
Info Security designed for protection of government IT and data
GLBA Gramm-Leach-Bliley Act resulted in the most sweeping overhaul of financial
services regulation in the United States.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1750-1751). Pearson
Education. Kindle Edition.
Link Encryption encryption—The data is encrypted through the entire communication path.
Because all header information is encrypted each node must decrypt and encrypt
the routing information. Source and destination address cannot be seen to
someone sniffing traffic.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1686-1689). Pearson
Education. Kindle Edition.
End-to-End Encryption Generally performed by the end user and as such can pass through each node
without further processing. However, source and destination addresses are
passed in clear text, so they can be seen to someone sniffing traffic.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1689-1691). Pearson
Education. Kindle Edition.
Pod Slurping a technique for illicitly downloading or copying data from a computer. Typically
used for data exfiltration.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1612-1614). Pearson
Education. Kindle Edition.
TPM the trusted platform module (TPM) chip. The TPM is a "slow" cryptographic
hardware processor which can be used to provide a greater level of security than
software encryption. A TPM chip installed on the motherboard of a client
computer can also be used for system state authentication. The TPM can also be
used to store the encryption keys.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1619-1622). Pearson
Education. Kindle Edition.
, SED Self-Encrypting Drives: Compliance—SEDs have the ability to offer built-in
encryption. This can help with compliance laws that many organizations must
adhere to. Strong security—SEDs make use of strong encryption. The contents of
an SED are always encrypted and the encryption keys are themselves encrypted
and protected in hardware. Ease of use—Users only have to authenticate to the
drive when the device boots up or when they change passwords/credentials. The
encryption is not visible to the user. Performance—As SEDs are not visible to the
user and are integrated into hardware, the system operates at full performance
with no impact on user productivity.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1636-1643). Pearson
Education. Kindle Edition.
DCMA Digital Millenium Copyright Act makes it a crime to bypass anti-piracy controls on
software
ISO 9001 a quality management standard that has widespread support and attention. ISO
9001 describes how production processes are to be managed and reviewed. It is
not a standard of quality; it is about how well a system or process is documented.
Gregg, Michael. CISSP Exam Cram (Kindle Locations 1816-1817). Pearson
Education. Kindle Edition.
CPTED is Crime Prevention Through Environmental Design (CPTED). The benefits of
CPTED include the following: Natural access control Natural surveillance
Territorial reinforcement. The effect of CPTED is that it causes the criminal to feel
an increase in the threat of being discovered and provides natural surveillance
that can serve as a physical deterrent control.
What is the height of a fence to prevent a determined 8 feet high or higher
intruder?
What is the height of a fence considered for casual 3-4 ft for casual, 6-7 for too tall
deterrence versus too tall to easily climb
Mantrap is used to prevent piggybacking and additional layers of defense can be obtained
by using guards and CCTV.
Name the 3 types of locks Grade 3: residential/consumer
Grade 2: light-duty and heavy-duty residential
Grade 1: High-security
What replaced Halon? FM-200, CEA-410, Argon
