An online banking service must ensure that customers can access their accounts at any time, even during a distributed denial-of-service (DDoS) attack. Which control is most effective?

Implement a DDoS protection service and redundant network paths.

Use a firewall to block all incoming traffic.

Implement strong password policies and MFA.

Encrypt all customer data in transit and at rest.

An e-commerce company experiences frequent downtime during peak shopping seasons, leading to lost sales. The IT team is tasked with ensuring that the website remains accessible to customers even during high traffic. Which approach best addresses this requirement?

Encrypt all web traffic using TLS to protect customer data.

Implement a database replication strategy to a secondary site.

Implement a load balancer across multiple web servers in different availability zones.

Increase the bandwidth of the internet connection to the data center.

An online auction platform needs to prevent bidders from denying that they placed a bid. The platform also needs to ensure that bid amounts are not altered after submission. Which control should be implemented?

Use a hash of the bid amount and store it separately.

Encrypt all bid data in transit using TLS.

Require bidders to use a digital signature when placing a bid.

Store all bids in a database with strict access controls.

A government agency is implementing a new system for storing classified documents. The system must ensure that only personnel with the appropriate clearance can read the documents, that the documents cannot be altered without detection, and that the system remains available during a cyber attack. Which control is most critical for maintaining confidentiality?

Implement a firewall and intrusion detection system.

Implement a redundant server cluster.

Implement mandatory access control (MAC) based on security labels.

Implement a digital signature on each document.

Certified Information Systems Security Professional

Domain 1Objective 2

1.2 - Understand and Apply Security Concepts CISSP Practice Questions (Page 4)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

16%of the exam

Questions 16–20

16application · medium
An online banking service must ensure that customers can access their accounts at any time, even during a distributed denial-of-service (DDoS) attack. Which control is most effective?
Select an answer first
17foundation · easy
Which security concept verifies the origin and genuineness of data or entities?
Select an answer first
18application · medium
An e-commerce company experiences frequent downtime during peak shopping seasons, leading to lost sales. The IT team is tasked with ensuring that the website remains accessible to customers even during high traffic. Which approach best addresses this requirement?
Select an answer first
19application · medium
An online auction platform needs to prevent bidders from denying that they placed a bid. The platform also needs to ensure that bid amounts are not altered after submission. Which control should be implemented?
Select an answer first
20expert · hard
A government agency is implementing a new system for storing classified documents. The system must ensure that only personnel with the appropriate clearance can read the documents, that the documents cannot be altered without detection, and that the system remains available during a cyber attack. Which control is most critical for maintaining confidentiality?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

1.2 - Understand and Apply Security Concepts CISSP Practice Questions (Page 4)

Questions 16–20

An online banking service must ensure that customers can access their accounts at any time, even during a distributed denial-of-service (DDoS) attack. Which control is most effective?

Which security concept verifies the origin and genuineness of data or entities?

An e-commerce company experiences frequent downtime during peak shopping seasons, leading to lost sales. The IT team is tasked with ensuring that the website remains accessible to customers even during high traffic. Which approach best addresses this requirement?

An online auction platform needs to prevent bidders from denying that they placed a bid. The platform also needs to ensure that bid amounts are not altered after submission. Which control should be implemented?

Keep studying — Security and Risk Management