A security analyst is reviewing logs from a critical server and notices a series of failed login attempts followed by a successful login from an unusual geographic location. The analyst must determine if this is a security incident. Which step should the analyst take first?

Disable the server's network access to contain the potential breach.

Immediately block the user's account to prevent further access.

Report the event to law enforcement as a confirmed data breach.

Correlate the log entries with other sources, such as the user's normal behavior and recent travel plans.

What is the primary purpose of reviewing logs in security monitoring?

To identify security events, anomalies, and potential incidents

To test the performance of the logging system

To ensure that all users have appropriate access permissions

To delete unnecessary data and free up storage space

What is the primary goal of a breach attack simulation?

To ensure compliance with all regulatory requirements

To emulate real-world attacks and assess the organization's detection and response capabilities

To replace the need for penetration testing

To fix all vulnerabilities in the system

Which of the following is an example of an interface that should be security-tested?

The company's marketing website content

The physical security of the data center

An application programming interface (API) that allows external systems to access data

A company wants to ensure that its customer-facing web application can handle a specific number of concurrent users without performance degradation. They need to establish a baseline for performance. Which testing method should they use?

Benchmark testing to measure system performance under defined conditions.

Interface testing to check API security.

Coverage analysis to ensure all code paths are tested.

Synthetic transactions to test functionality.

Certified Information Systems Security Professional

Domain 6Objective 2

6.2 - Conduct Security Control Testing CISSP Practice Questions (Page 1)

Part of the Security Assessment and Testing domain, which accounts for 12% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

12%of the exam

Questions 1–5

1application · medium
A security analyst is reviewing logs from a critical server and notices a series of failed login attempts followed by a successful login from an unusual geographic location. The analyst must determine if this is a security incident. Which step should the analyst take first?
Select an answer first
2foundation · easy
What is the primary purpose of reviewing logs in security monitoring?
Select an answer first
3foundation · easy
What is the primary goal of a breach attack simulation?
Select an answer first
4foundation · easy
Which of the following is an example of an interface that should be security-tested?
Select an answer first
5application · medium
A company wants to ensure that its customer-facing web application can handle a specific number of concurrent users without performance degradation. They need to establish a baseline for performance. Which testing method should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.