A research lab stores sensitive experimental data on a network-attached storage (NAS) device. The lab wants to protect the data at rest while allowing researchers to access it from their workstations. Which control is MOST effective?

Require researchers to use a VPN to access the NAS.

Use a firewall to restrict network access to the NAS.

Enable encryption on the NAS and configure access control lists (ACLs) for each research group.

Place the NAS in a locked server room and require keycard access.

A company uses a cloud storage service to store sensitive documents. The documents are encrypted at rest by the cloud provider, but the company wants to ensure that the data is protected even if the provider's encryption is compromised. Which additional control is MOST effective?

Regularly back up the documents to another cloud provider.

Implement client-side encryption before uploading the documents.

Enable multi-factor authentication on the cloud storage accounts.

Use a VPN when accessing the cloud storage.

Which technology creates a secure, encrypted tunnel for data transmitted over an untrusted network, such as the internet?

RAID (Redundant Array of Independent Disks)

Certified Information Systems Security Professional

Domain 7Objective 5

7.5 - Apply Resource Protection CISSP Practice Questions (Page 1)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

13%of the exam

Questions 1–5

1application · medium
A research lab stores sensitive experimental data on a network-attached storage (NAS) device. The lab wants to protect the data at rest while allowing researchers to access it from their workstations. Which control is MOST effective?
Select an answer first
2expert · hard
A company uses a cloud storage service to store sensitive documents. The documents are encrypted at rest by the cloud provider, but the company wants to ensure that the data is protected even if the provider's encryption is compromised. Which additional control is MOST effective?
Select an answer first
3foundation · easy
Which technology creates a secure, encrypted tunnel for data transmitted over an untrusted network, such as the internet?
Select an answer first
4foundation · easy
In the media management lifecycle, which activity ensures that an organization can account for the location and status of all media containing sensitive data?
Select an answer first
5foundation · easy
Which method protects data at rest by encrypting the entire storage device, including the operating system and all files?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

7.5 - Apply Resource Protection CISSP Practice Questions (Page 1)

Questions 1–5

A research lab stores sensitive experimental data on a network-attached storage (NAS) device. The lab wants to protect the data at rest while allowing researchers to access it from their workstations. Which control is MOST effective?

A company uses a cloud storage service to store sensitive documents. The documents are encrypted at rest by the cloud provider, but the company wants to ensure that the data is protected even if the provider's encryption is compromised. Which additional control is MOST effective?

Which technology creates a secure, encrypted tunnel for data transmitted over an untrusted network, such as the internet?

In the media management lifecycle, which activity ensures that an organization can account for the location and status of all media containing sensitive data?

Which method protects data at rest by encrypting the entire storage device, including the operating system and all files?

Keep studying — Security Operations