A company is implementing a new identity and access management (IAM) solution. The security team wants to ensure that all access to systems and data is logged and that logs are protected from tampering. Which control is most important?

Assign a dedicated log administrator who is responsible for reviewing logs.

Enable verbose logging on all systems and store logs in a central SIEM.

Use write-once, read-many (WORM) storage for logs to prevent modification.

Encrypt all logs at rest and in transit.

What is the primary purpose of classifying information and labeling it accordingly?

To reduce the storage cost of information

To comply with all international data protection regulations

To enable appropriate protection and handling based on the information's sensitivity

To ensure that information is encrypted at rest and in transit

A company has a mix of corporate-owned and employee-owned devices. The company wants to ensure that only authorized devices can access the corporate network. Which control is most effective?

Implement network access control (NAC) that checks device compliance before granting access.

Use MAC address filtering on the wireless access points.

Use a captive portal that requires users to accept the acceptable use policy.

Require users to enter a VPN password to access the network.

What is the primary purpose of federated identity in service access control?

To provide backup for user accounts

To encrypt all service-to-service communication

To allow users to use the same credentials across multiple organizations or services

To store user passwords in a central database

Certified Information Systems Security Professional

Domain 5Objective 1

5.1 - Control Physical and Logical Access to Assets CISSP Practice Questions (Page 5)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

13%of the exam

Questions 21–25

21expert · medium
A company is implementing a new identity and access management (IAM) solution. The security team wants to ensure that all access to systems and data is logged and that logs are protected from tampering. Which control is most important?
Select an answer first
22foundation · medium
What is the primary purpose of classifying information and labeling it accordingly?
Select an answer first
23foundation · medium
An organization installs a badge reader at the entrance to its data center. This is an example of which type of access control?
Select an answer first
24expert · medium
A company has a mix of corporate-owned and employee-owned devices. The company wants to ensure that only authorized devices can access the corporate network. Which control is most effective?
Select an answer first
25foundation · medium
What is the primary purpose of federated identity in service access control?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.