Certified Information Systems Security Professional
Domain 1Objective 9
1.9 - Understand and Apply Risk Management Concepts CISSP Practice Questions (Page 5)
Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)
35questions here
7free pages
9concepts
16%of the exam
Questions 21–25
- 21
Which risk response strategy involves purchasing cybersecurity insurance?
Select an answer first - 22
What is the purpose of a risk maturity model?
Select an answer first - 23
Which metric is commonly used to measure risk over time?
Select an answer first - 24
Which risk framework is specifically designed for payment card industry compliance?
Select an answer first - 25
A company has implemented a new access control system that requires biometric authentication for entry into the data center. However, due to a high false rejection rate, employees are often locked out. To address this, the security team implements a compensating control that allows a security guard to manually verify identity and grant access. Which control type is the security guard's verification?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.