ISC2 Certified Information Systems Security Professional (CISSP) - 340 Questions

1. A newly hired security analyst asks their manager which of the four canons in the ISC2 Code of Professional Ethics takes the highest priority when all four come into conflict. Which answer correctly identifies the FIRST canon and its meaning?

2. A security administrator discovers that a colleague is selling confidential client records on the dark web. Under the ISC2 Code of Professional Ethics, what is the administrator's MOST appropriate first action?

3. An organization stores encrypted financial records in a cloud environment. Users can only access data they are explicitly authorized to view, and all access is logged. Which property of the CIA triad is PRIMARILY demonstrated by the access control mechanism?

4. A hospital's electronic health record system uses cryptographic hash functions to detect whether patient records have been modified since they were last saved. Which security property does this mechanism PRIMARILY support?

5. A CISO is developing the company's information security policy hierarchy. She wants to create a document that mandates the use of AES-256 encryption for all data at rest across every business unit. What type of document is she creating?