A mid-sized company wants to demonstrate to its customers that its information security management system (ISMS) is robust and independently verified. The company is considering ISO/IEC 27001 certification. What is the primary benefit of this certification?

It guarantees that the organization will not suffer a data breach.

It provides a legal safe harbor from data breach lawsuits.

It is required by law for all companies that process personal data.

It provides independent verification that the organization has implemented a comprehensive ISMS.

Which of the following is a common requirement across many data breach notification laws?

Organizations are required to pay a fine to the affected individuals

Notification is only required if the breach involves financial data

Organizations must publish the breach in a national newspaper

Notification must be provided to affected individuals and/or regulators within a specified timeframe

Which of the following is a key characteristic that distinguishes a patent from a copyright?

A patent lasts for the life of the author plus 70 years, while a copyright lasts for 20 years

A patent is granted automatically upon creation, while a copyright requires registration

A patent protects brand names, while a copyright protects trade secrets

A patent protects inventions and processes, while a copyright protects original works of authorship

A multinational company transfers personal data of its employees from its European Union branch to its headquarters in the United States. Under the GDPR, what is the most important legal consideration for this transborder data flow?

Encrypting the data during transfer

Ensuring that the transfer is subject to an appropriate safeguard, such as Standard Contractual Clauses (SCCs) or an adequacy decision

Obtaining consent from each employee for every data transfer

Ensuring that the US headquarters has a privacy policy

Certified Information Systems Security Professional

Domain 1Objective 4

1.4 - Understand Legal, Regulatory, and Compliance Issues That Pertain to Information Security in a Holistic Context CISSP Practice Questions (Page 4)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

11concepts

16%of the exam

Questions 16–20

16application · medium
A mid-sized company wants to demonstrate to its customers that its information security management system (ISMS) is robust and independently verified. The company is considering ISO/IEC 27001 certification. What is the primary benefit of this certification?
Select an answer first
17foundation · easy
Which of the following is a common requirement across many data breach notification laws?
Select an answer first
18foundation · easy
Which of the following is a key characteristic that distinguishes a patent from a copyright?
Select an answer first
19foundation · easy
A multinational company transfers personal data of its employees from its European Union branch to its headquarters in the United States. Under the GDPR, what is the most important legal consideration for this transborder data flow?
Select an answer first
20foundation · easy
A software company develops a unique algorithm that gives it a competitive advantage. The company decides not to patent the algorithm but instead to protect it through confidentiality agreements and restricted access. Which type of intellectual property is the company using to protect this algorithm?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.