A hospital's electronic health record (EHR) system must be available to doctors at all times, even during a natural disaster that could affect the primary data center. The system also must maintain the confidentiality and integrity of patient data. Which approach best balances availability with the other requirements?

Replicate the EHR database to a secondary site in a different geographic region and use asynchronous replication.

Use a load balancer across multiple servers in the same data center.

Use a backup strategy with daily backups to tape and store offsite.

Use synchronous replication to a secondary site in the same data center.

How do authenticity and nonrepudiation relate to the CIA triad?

They are less important than the CIA triad and can be ignored

They are only relevant to legal systems, not technical security

They complement the triad by addressing trust and accountability

They are alternative names for confidentiality and integrity

A law firm handles sensitive client documents. The firm wants to ensure that only the assigned attorney can read a document, and that the document's origin can be verified. Which control should be implemented?

Use a hash function to create a checksum for each document.

Use a shared folder with NTFS permissions.

Use a public key infrastructure (PKI) with digital certificates for document encryption and signing.

Use a VPN for remote access to the document management system.

Certified Information Systems Security Professional

Domain 1Objective 2

1.2 - Understand and Apply Security Concepts CISSP Practice Questions (Page 3)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

16%of the exam

Questions 11–15

11expert · hard
A hospital's electronic health record (EHR) system must be available to doctors at all times, even during a natural disaster that could affect the primary data center. The system also must maintain the confidentiality and integrity of patient data. Which approach best balances availability with the other requirements?
Select an answer first
12foundation · easy
How do authenticity and nonrepudiation relate to the CIA triad?
Select an answer first
13foundation · easy
Which security concept ensures that authorized users have timely and reliable access to data and systems?
Select an answer first
14application · medium
A law firm handles sensitive client documents. The firm wants to ensure that only the assigned attorney can read a document, and that the document's origin can be verified. Which control should be implemented?
Select an answer first
15foundation · easy
Which of the following is a common technique to support availability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

1.2 - Understand and Apply Security Concepts CISSP Practice Questions (Page 3)

Questions 11–15

How do authenticity and nonrepudiation relate to the CIA triad?

Which security concept ensures that authorized users have timely and reliable access to data and systems?

A law firm handles sensitive client documents. The firm wants to ensure that only the assigned attorney can read a document, and that the document's origin can be verified. Which control should be implemented?

Which of the following is a common technique to support availability?

Keep studying — Security and Risk Management