What is the purpose of version control for security documentation?

To make documents harder to access

To ensure documents are written in a single language

To eliminate the need for periodic reviews

To track changes and maintain a history of revisions

A security manager is developing guidelines for the use of personal mobile devices for work. The guidelines are optional, but the manager wants to encourage adoption. What is the most effective way to encourage compliance with non-mandatory guidelines?

Keep the guidelines confidential to avoid confusion

Include penalties for noncompliance

Make the guidelines mandatory and enforce them

Clearly explain the benefits of following the guidelines

A company is implementing a new security policy that requires multi-factor authentication for all remote access. The IT department is concerned about user resistance and productivity loss. What is the most effective implementation strategy?

Delay implementation until users request it

Implement the policy immediately for all users

Implement the policy only for IT staff

Roll out the policy in phases, starting with a pilot group, and provide training and support

Why is it important to communicate security policies to all employees?

To replace the need for enforcement

To satisfy external auditors only

To reduce the need for security controls

To ensure employees are aware of their security responsibilities

Certified Information Systems Security Professional

Domain 1Objective 6

1.6 - Develop, Document, and Implement Security Policy, Standards, Procedures, and Guidelines CISSP Practice Questions (Page 5)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

16%of the exam

Questions 21–25

21foundation · easy
What is the purpose of version control for security documentation?
Select an answer first
22expert · hard
A security manager is developing guidelines for the use of personal mobile devices for work. The guidelines are optional, but the manager wants to encourage adoption. What is the most effective way to encourage compliance with non-mandatory guidelines?
Select an answer first
23expert · hard
A company is implementing a new security policy that requires multi-factor authentication for all remote access. The IT department is concerned about user resistance and productivity loss. What is the most effective implementation strategy?
Select an answer first
24application · easy
A new help desk technician must follow a precise sequence of steps to reset a user's password and verify their identity. The company wants to ensure this task is performed consistently and correctly every time. What should the technician be given?
Select an answer first
25foundation · easy
Why is it important to communicate security policies to all employees?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.