CISSP DOMAIN 1: REVIEW QUESTIONS
AND ANSWERS WITH COMPLETE
SOLUTIONS ALREADY PASSED!!!
Question 1
Alice has some data that is extremely valuable. She backs it up from her computer
to a flash drive, and puts the flash drive in a safe deposit box. Which two principles
of the CIA triad does this address?
A. Confidentiality and Integrity
B. Confidentiality and Availability
C. Integrity and Availability
D. Availability and Non-repudiation
ANSWER: B. Confidentiality and Availability ✔✔
Explanation: The physical safe deposit box provides Confidentiality by restricting
unauthorized read access to the physical media. Creating a backup copy on a flash
drive ensures Availability, meaning the data can still be accessed and recovered if
the primary computer fails or is destroyed.
Question 2
An organization's Recovery Time Objective (RTO) must always be less than or
equal to which of the following metrics?
A. 12 hours
B. The time it takes to alert the public
C. The Maximum Allowable Downtime (MAD)
D. The duration allowed by regulators
, ANSWER: C. The maximum allowable downtime (MAD) ✔✔
Explanation: The Maximum Allowable Downtime (MAD)—also referred to as
Maximum Tolerable Downtime (MTD)—is the absolute longest period an
organization can survive without a specific business function before suffering
irreversible damage. Therefore, the target timeline to restore that system, the
Recovery Time Objective (RTO), must be shorter than or equal to the MAD to
ensure survival.
Question 3
According to the (ISC)² Code of Ethics, a certified security practitioner is expected
to FIRST serve which of the following entities?
A. The client
B. The industry
C. (ISC)²
D. Humanity
ANSWER: D. Humanity ✔✔
Explanation: The very first canon of the (ISC)² Code of Ethics states that
practitioners must "Protect society, the common good, necessary public trust and
confidence, and the infrastructure." This mandates that safety and duty to public
interest and humanity always take strict precedence over obligations to clients,
employers, or the industry.
B -ANSWER ✔✔Bob is the security manager for an online retailer. To protect the
customer data they are entrusted with, Bob requires all personnel to attend security
training sessions regularly. Bob documents and tracks which personnel have
attended training, and he suspends account access for those who have missed
training.
AND ANSWERS WITH COMPLETE
SOLUTIONS ALREADY PASSED!!!
Question 1
Alice has some data that is extremely valuable. She backs it up from her computer
to a flash drive, and puts the flash drive in a safe deposit box. Which two principles
of the CIA triad does this address?
A. Confidentiality and Integrity
B. Confidentiality and Availability
C. Integrity and Availability
D. Availability and Non-repudiation
ANSWER: B. Confidentiality and Availability ✔✔
Explanation: The physical safe deposit box provides Confidentiality by restricting
unauthorized read access to the physical media. Creating a backup copy on a flash
drive ensures Availability, meaning the data can still be accessed and recovered if
the primary computer fails or is destroyed.
Question 2
An organization's Recovery Time Objective (RTO) must always be less than or
equal to which of the following metrics?
A. 12 hours
B. The time it takes to alert the public
C. The Maximum Allowable Downtime (MAD)
D. The duration allowed by regulators
, ANSWER: C. The maximum allowable downtime (MAD) ✔✔
Explanation: The Maximum Allowable Downtime (MAD)—also referred to as
Maximum Tolerable Downtime (MTD)—is the absolute longest period an
organization can survive without a specific business function before suffering
irreversible damage. Therefore, the target timeline to restore that system, the
Recovery Time Objective (RTO), must be shorter than or equal to the MAD to
ensure survival.
Question 3
According to the (ISC)² Code of Ethics, a certified security practitioner is expected
to FIRST serve which of the following entities?
A. The client
B. The industry
C. (ISC)²
D. Humanity
ANSWER: D. Humanity ✔✔
Explanation: The very first canon of the (ISC)² Code of Ethics states that
practitioners must "Protect society, the common good, necessary public trust and
confidence, and the infrastructure." This mandates that safety and duty to public
interest and humanity always take strict precedence over obligations to clients,
employers, or the industry.
B -ANSWER ✔✔Bob is the security manager for an online retailer. To protect the
customer data they are entrusted with, Bob requires all personnel to attend security
training sessions regularly. Bob documents and tracks which personnel have
attended training, and he suspends account access for those who have missed
training.
