ISC CISSP Practice Test 1 - ExamCollection

Question 1

A credentialed consultant is told to hide a critical weakness in a public-safety system to preserve a contract. Which response best addresses the central security requirement with a defensible, risk-based design?

Publish private customer records to attract attention
Withhold the finding until contract renewal
Disclose the conflict and recuse the analyst from the decision according to policy
Escalate the safety risk through lawful channels and put protection of society and public trust first

Explanation

Correct Answer

The first ISC2 canon prioritizes the public good over a sponsor's commercial convenience.

Incorrect Answers

Unauthorized disclosure may create further harm and is not a controlled ethical escalation.

Concealment risks public harm and violates the professional duty to act honorably.

Perceived conflicts undermine impartial judgment even without proven bribery. Escalate the safety risk through lawful channels and put protection of society and public trust first.

Question 2

A supplier offers an analyst an expensive gift immediately before scoring a security procurement. Which response best addresses the central security requirement with a defensible, risk-based design?

Record the gift in the procurement file but allow the same analyst to score the supplier without a conflict review.
Decline the gift but make no disclosure to the procurement conflict-of-interest owner.
Ask a second analyst to co-sign the scoring while the recipient keeps authority over the supplier ranking.
Disclose the conflict and recuse the analyst from the decision according to policy

Explanation

Correct Answer

Disclose the offered benefit, follow the conflict-of-interest process, and recuse the analyst from scoring when required. Procurement integrity depends on independent evaluation rather than undisclosed influence.

Incorrect Answers

Recording the gift does not cure the conflict if the affected analyst retains uncontrolled influence over the vendor score.

Declining a gift helps reduce influence but can still leave an undisclosed attempted inducement requiring reporting under procurement policy.

A second signature does not remove the conflicted analyst’s decision-making influence; independent scoring or recusal may be necessary.

Question 3

An architect discovers a serious flaw in software used by hospitals while management pressures silence. Which response best addresses the central security requirement with a defensible, risk-based design?

Disclose the conflict and recuse the analyst from the decision according to policy
Report the defect responsibly through approved safety and vulnerability disclosure paths
Post an exploit proof on public social media immediately
Wait for an exploit before taking action

Explanation

Correct Answer

Due care to the public and affected users outweighs concealing a material safety risk.

Incorrect Answers

Perceived conflicts undermine impartial judgment even without proven bribery. Report the defect responsibly through approved safety and vulnerability disclosure paths.

Uncoordinated release may expose patients and impede remediation.

Known foreseeable risk warrants timely response before confirmed victimization.

Question 4

A security consultant finds a high-impact defect in a hospital system. Management pressures the consultant to conceal it to preserve a contract. What response best aligns with professional ethics?

Erase the finding from work papers and state that the system was fully tested.
Report the safety risk accurately through authorized escalation channels, documenting evidence and prioritizing protection of people.
Publish exploit details publicly before allowing the hospital or vendor to respond.
Keep the weakness secret indefinitely and report only low-risk usability issues.

Explanation

Correct Answer

Professional duty to society and safe system operation cannot be subordinated to a contract’s commercial convenience. Documentation supports accountable remediation and risk ownership.

Incorrect Answers

Destroying evidence and presenting a false conclusion undermines integrity and can expose patients to preventable harm.

Uncontrolled disclosure can increase immediate risk to vulnerable systems and ignores responsible notification channels.

Suppressing material safety information leaves responsible owners unable to prioritize mitigation.

Question 5

After a prior organizational ethics finding, a university consortium reports that the approved safeguard is implemented: “Disclose the conflict and recuse the analyst from the decision according to policy.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?

Use the completion of this alternative as proof: Accept the gift and privately promise fair scoring
Accept a signed change ticket saying: Disclose the conflict and recuse the analyst from the decision according to policy
Run this adjacent but different test as the sole proof: Confirm that the significant safety risk reached accountable decision makers with a documented disposition
Inspect conflict declarations and independent scoring records before accepting the procurement decision

Explanation

Correct Answer

Evidence of disclosure and separation supports defensible procurement governance.

Incorrect Answers

A private promise does not remove the appearance of improper influence. Inspect conflict declarations and independent scoring records before accepting the procurement decision.

Inspect conflict declarations and independent scoring records before accepting the procurement decision. Evidence of disclosure and separation supports defensible procurement governance.

An accountable decision shows that ethical escalation was neither suppressed nor replaced by uncontrolled disclosure. It tests isc2 code of ethics, while this case requires evidence about organizational ethics.

Question 6

After a prior professional duty and public trust finding, a cloud service provider reports that the approved safeguard is implemented: “Report the defect responsibly through approved safety and vulnerability disclosure paths.” The assurance team must decide whether this measure demonstrably works in operation. Which evidence would MOST directly establish its effectiveness?

Run this adjacent but different test as the sole proof: Confirm that the significant safety risk reached accountable decision makers with a documented disposition
Accept a signed change ticket saying: Report the defect responsibly through approved safety and vulnerability disclosure paths
Verify responsible notification, mitigation tracking, and absence of retaliatory suppression
Use the completion of this alternative as proof: Wait for an exploit before taking action

Explanation

Correct Answer

A documented coordinated response protects public trust and allows affected parties to act.

Incorrect Answers

Verify responsible notification, mitigation tracking, and absence of retaliatory suppression. A documented coordinated response protects public trust and allows affected parties to act.

Known foreseeable risk warrants timely response before confirmed victimization. Verify responsible notification, mitigation tracking, and absence of retaliatory suppression.

Question 7

A payroll team needs to stop unauthorized employees from reading salary files while preserving authorized processing. Which response best addresses the central security requirement with a defensible, risk-based design?

Add only transaction hashes to payroll exports
Increase database redundancy without access restrictions
Use approved digital signatures backed by protected private keys and attributable audit evidence
Restrict file access by need to know and encrypt sensitive storage and transfer paths

Explanation

Correct Answer

Confidentiality is protection against unauthorized disclosure rather than alteration or outage.

Incorrect Answers

Hashes may detect modifications but do not hide salary values.

Availability improvements do not prevent an unauthorized user from viewing records.

Strong signing and key custody can support evidence that a particular signer approved content. Restrict file access by need to know and encrypt sensitive storage and transfer paths.

Question 8

A payments application must detect an altered invoice after transmission even if the payload stays readable. Which response best addresses the central security requirement with a defensible, risk-based design?

Encrypt the invoice with unauthenticated encryption alone
Add a second file server replica
Use authenticated integrity protection such as a digital signature or suitable message authentication code
Use verified identity and cryptographic sender authentication before trusting supplier-origin messages

Explanation

Correct Answer

Integrity controls detect unauthorized changes and bind protected message content to verification.

Incorrect Answers

Encryption without authentication may not reliably detect malicious changes.

Replication may copy the altered invoice without revealing tampering.

Authenticity establishes the claimed origin or identity, distinct from merely transmitting over an encrypted channel. Use authenticated integrity protection such as a digital signature or suitable message authentication code.

Question 9

A life-safety dispatch platform requires continuity when a single server or network path fails. Which response best addresses the central security requirement with a defensible, risk-based design?

Tighten password complexity without adding recovery capacity
Restrict file access by need to know and encrypt sensitive storage and transfer paths
Remove single points of failure with tested redundancy, capacity, and recovery plans
Encrypt only the database backups

Explanation

Correct Answer

Availability is timely usable service despite component faults.

Incorrect Answers

Authentication policy is unrelated to infrastructure resilience.

Confidentiality is protection against unauthorized disclosure rather than alteration or outage. Remove single points of failure with tested redundancy, capacity, and recovery plans.

Backup confidentiality alone does not maintain online dispatch service during faults.

Question 10

An API accepts messages claiming to come from a trusted supplier, but sender identity can be spoofed. Which response best addresses the central security requirement with a defensible, risk-based design?

Add message compression to reduce bandwidth
Use verified identity and cryptographic sender authentication before trusting supplier-origin messages
Rely on source IP alone as proof of supplier identity
Use authenticated integrity protection such as a digital signature or suitable message authentication code

Explanation

Correct Answer

Authenticity establishes the claimed origin or identity, distinct from merely transmitting over an encrypted channel.

Incorrect Answers

Compression has no role in proving origin.

Network addresses can be shared or spoofed and lack strong sender authentication.

Integrity controls detect unauthorized changes and bind protected message content to verification. Use verified identity and cryptographic sender authentication before trusting supplier-origin messages.