What is the primary purpose of a remote wipe capability on a mobile device?

To disable the device's network connectivity

To update the device's operating system

To erase data on the device if it is lost or stolen

During system access, what is the purpose of the authorization step?

To record user activities for later review

To encrypt data transmitted between the user and the system

To verify the identity of the user

To determine what resources and actions the user is permitted to access

A hospital uses mobile devices for nurses to access patient records. The devices are shared among shifts. The hospital wants to ensure that each nurse's access is personalized and that data is protected if a device is lost. Which combination of controls is most effective?

Implement biometric authentication for the device, and disable USB ports.

Use a mobile device management (MDM) solution to enforce a passcode and enable remote wipe.

Require each nurse to log in with their own credentials, and enable full-disk encryption on the devices.

Use a shared login for all nurses, and rely on the device's screen lock.

A data center wants to prevent unauthorized individuals from following authorized employees through a secure entrance. Which physical control is specifically designed to prevent tailgating?

A security camera monitoring the entrance

A biometric fingerprint reader on the door

A mantrap with two interlocking doors

A proximity card reader that unlocks the door for a short period

Certified Information Systems Security Professional

Domain 5Objective 1

5.1 - Control Physical and Logical Access to Assets CISSP Practice Questions (Page 4)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

13%of the exam

Questions 16–20

16foundation · medium
Which principle ensures that users are granted access only to the information required to perform their job duties?
Select an answer first
17foundation · medium
What is the primary purpose of a remote wipe capability on a mobile device?
Select an answer first
18foundation · medium
During system access, what is the purpose of the authorization step?
Select an answer first
19application · medium
A hospital uses mobile devices for nurses to access patient records. The devices are shared among shifts. The hospital wants to ensure that each nurse's access is personalized and that data is protected if a device is lost. Which combination of controls is most effective?
Select an answer first
20application · easy
A data center wants to prevent unauthorized individuals from following authorized employees through a secure entrance. Which physical control is specifically designed to prevent tailgating?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.