What is a key consideration when integrating security controls into an existing system architecture?

Ensuring the controls do not disrupt business operations

Avoiding any changes to the existing architecture

Implementing controls in isolation from other systems

Selecting controls that are the most expensive to justify budget

A multinational corporation is adopting ISO/IEC 27001 as its information security management standard. The security team is selecting controls for a new cloud-based collaboration platform. Which approach aligns with ISO/IEC 27001's control selection process?

Select controls based on the vendor's recommendations for the cloud platform.

Use the CIS Controls as the sole basis for control selection.

Perform a risk assessment and select controls from Annex A that mitigate identified risks.

Implement all controls listed in Annex A to ensure full compliance.

Which of the following is a primary input when analyzing system security requirements?

The organization's marketing strategy

The color scheme of the user interface

The results of a risk assessment

The number of employees in the organization

What is the primary purpose of the security control selection process?

To satisfy external auditors by documenting that controls exist

To choose a set of controls that effectively mitigate identified risks while meeting organizational requirements

To ensure that all possible security controls are implemented in every system

To identify the most expensive controls to justify a larger security budget

Certified Information Systems Security Professional

Domain 3Objective 3

3.3 - Select Controls Based Upon Systems Security Requirements CISSP Practice Questions (Page 2)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

13%of the exam

Questions 6–10

6foundation · easy
A security guard checking identification badges at a facility entrance is an example of which control category and type?
Select an answer first
7foundation · easy
What is a key consideration when integrating security controls into an existing system architecture?
Select an answer first
8application · medium
A multinational corporation is adopting ISO/IEC 27001 as its information security management standard. The security team is selecting controls for a new cloud-based collaboration platform. Which approach aligns with ISO/IEC 27001's control selection process?
Select an answer first
9foundation · easy
Which of the following is a primary input when analyzing system security requirements?
Select an answer first
10foundation · easy
What is the primary purpose of the security control selection process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.