A healthcare provider uses a web portal for patients to view their medical records. The portal is accessed over the internet. Which control is ESSENTIAL to protect the data in transit?

Use HTTPS with a valid TLS certificate for the portal.

Require patients to use a VPN to access the portal.

Encrypt the database that stores the medical records.

Use a strong password policy for patient accounts.

A government contractor stores classified project files on removable USB drives. The drives are used by multiple employees and are often carried between offices. Which set of controls provides the BEST protection for the data at rest on these drives?

Label each drive with a 'Confidential' sticker and store them in a locked drawer when not in use.

Encrypt the drives with hardware-based encryption and require a PIN or biometric to unlock them.

Use a central database to track which employee has each drive.

Disable the USB ports on all office computers to prevent unauthorized copying.

A financial institution is required to retain audit records for seven years. The records are stored on optical media (CDs/DVDs) and magnetic tapes. The compliance team is concerned about media degradation over time. Which strategy is MOST effective to ensure the records remain readable for the full retention period?

Migrate the data to new media every few years and verify the integrity of the copies.

Store the media in a climate-controlled environment and handle them with gloves.

Encrypt the media and store the encryption keys separately.

Make multiple copies of the media and store them in different locations.

Which protocol is commonly used to secure web traffic between a browser and a web server, ensuring confidentiality and integrity of data in transit?

SNMP (Simple Network Management Protocol)

SMTP (Simple Mail Transfer Protocol)

Certified Information Systems Security Professional

Domain 7Objective 5

7.5 - Apply Resource Protection CISSP Practice Questions (Page 2)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

13%of the exam

Questions 6–10

6application · medium
A healthcare provider uses a web portal for patients to view their medical records. The portal is accessed over the internet. Which control is ESSENTIAL to protect the data in transit?
Select an answer first
7foundation · easy
Which technique is specifically used to protect the confidentiality of data stored on a portable hard drive if the drive is lost or stolen?
Select an answer first
8application · medium
A government contractor stores classified project files on removable USB drives. The drives are used by multiple employees and are often carried between offices. Which set of controls provides the BEST protection for the data at rest on these drives?
Select an answer first
9expert · hard
A financial institution is required to retain audit records for seven years. The records are stored on optical media (CDs/DVDs) and magnetic tapes. The compliance team is concerned about media degradation over time. Which strategy is MOST effective to ensure the records remain readable for the full retention period?
Select an answer first
10foundation · easy
Which protocol is commonly used to secure web traffic between a browser and a web server, ensuring confidentiality and integrity of data in transit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

7.5 - Apply Resource Protection CISSP Practice Questions (Page 2)

Questions 6–10

A healthcare provider uses a web portal for patients to view their medical records. The portal is accessed over the internet. Which control is ESSENTIAL to protect the data in transit?

Which technique is specifically used to protect the confidentiality of data stored on a portable hard drive if the drive is lost or stolen?

A government contractor stores classified project files on removable USB drives. The drives are used by multiple employees and are often carried between offices. Which set of controls provides the BEST protection for the data at rest on these drives?

Which protocol is commonly used to secure web traffic between a browser and a web server, ensuring confidentiality and integrity of data in transit?

Keep studying — Security Operations