Exam preparation
CISSP
- Multiple choice
- Computer-adaptive
- International
- Technology
- ISC2
4 guides for this exam — how to prepare, what to practise, and how to know it has gone in.
Plan your CISSP revision: a day-by-day calendar up to your exam date, free and without an account.
A written answer, marked
A question from a CISSP mock paper, answered and marked. From How to Prepare for CISSP: A Practical Study Guide.
A department has started using a personal cloud service to share sensitive business records after its approved service became unavailable. What should the security professional recommend first?
4/5Stop staff using the personal service, tell the department to use the approved process, and review the records already shared. The security team should assess the risk and make sure the department has a working approved way to share the information.
You identified unauthorised handling and the need for a viable approved alternative. The answer is risk-aware, but the immediate response should also follow the organisation's incident process and establish the scope of exposure before concluding what action is sufficient.
Missed
−State that relevant evidence should be preserved and that legal or privacy specialists should be involved if the exposure or applicable obligations warrant it.
Model answerConfirm the information involved, affected users and business impact, stating any assumptions. Follow the organisation's incident-response and data-handling policies; contain further unauthorised sharing while maintaining a suitable approved business process. Preserve relevant evidence and assess the scope and risk of exposure. Involve legal, privacy or other responsible specialists as required by policy and applicable obligations. Document the decision, address the underlying service availability problem and monitor residual risk.
Yours are written from your own notes, and the free plan needs no payment details.
Guides
- How to Prepare for CISSP: A Practical Study GuideA practical CISSP preparation method: organise the eight domains, practise scenario decisions and use missed marks to guide revision.
- CISSP Study Plan: An Eight-Week ProgrammeA practical eight-week CISSP study plan with three sessions a week, domain coverage, review routines and scenario practice.
- CISSP Flashcards: 18 Core Security Decisions to PractisePractise 18 CISSP flashcards on risk, governance, controls, recovery and security engineering, with a short method for reviewing missed answers.
- CISSP Practice Questions: 8 Risk-Based ScenariosPractise eight CISSP-style security scenarios with worked answers on risk, governance, access control, incident response and more.
Preparing for CISSP? Build your CISSP board from your own notes — the cards, papers and lectures are written from it. Free plan: 20 cards, a paper, a lecture and a viva to try.
Start on MySummaries