Certified Information Systems Security Professional
Domain 1Objective 9
1.9 - Understand and Apply Risk Management Concepts CISSP Practice Questions (Page 6)
Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)
35questions here
7free pages
9concepts
16%of the exam
Questions 26–30
- 26
A manufacturing company's security team is conducting a risk assessment. They have identified that a disgruntled employee could potentially sabotage the production control system. Which type of threat actor does this scenario represent?
Select an answer first - 27
A small e-commerce company faces a risk of credit card data theft from its payment processing system. The company's risk assessment shows that the cost of implementing strong encryption and tokenization is $50,000, while the potential loss from a breach is estimated at $500,000. The company decides to implement the encryption and tokenization. Which risk response strategy is the company applying?
Select an answer first - 28
What is the primary goal of continuous monitoring in risk management?
Select an answer first - 29
Which activity is a common method used during a control assessment?
Select an answer first - 30
Which stakeholder is most likely to receive a high-level executive risk report?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.