What is the primary purpose of a civil investigation?

To resolve a dispute between parties, typically involving claims for damages or injunctions

To gather evidence for criminal prosecution

To determine facts for internal corrective action

To ensure compliance with government regulations

An administrative investigation is being conducted into an employee's misuse of company email. The security team is asked to provide email logs. What is the most important reason to document the collection process and maintain a chain of custody?

To prove the employee actually sent the emails

To satisfy the requirements of the regulatory agency

To protect the company from a lawsuit by the employee

To ensure the evidence can be used in a potential criminal prosecution

A credit card processing company wants to ensure it is following best practices for protecting cardholder data. It hires an external assessor to review its systems against the Payment Card Industry Data Security Standard (PCI DSS). What type of investigation is this?

Industry standards investigation

Which of the following is a key element of maintaining chain of custody?

Ensuring evidence is stored in a fireproof safe

Encrypting all evidence at rest

Documenting each transfer of evidence with date, time, and handler

A data breach occurs, and the company faces a criminal investigation by the FBI, a civil lawsuit from affected customers, and an internal administrative investigation. The security team is collecting evidence. What is the most significant challenge the team faces?

The internal investigation must be halted to avoid interfering with the FBI

The civil lawsuit will be dismissed if a criminal investigation is ongoing

The evidence must meet different legal standards for each investigation

The FBI will take over all evidence collection, so the team has no role

Certified Information Systems Security Professional

Domain 1Objective 5

1.5 - Understand Requirements for Investigation Types (i.e., Administrative, Criminal, Civil, Regulatory, Industry Standards) CISSP Practice Questions (Page 3)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

16%of the exam

Questions 11–15

11foundation · easy
What is the primary purpose of a civil investigation?
Select an answer first
12application · medium
An administrative investigation is being conducted into an employee's misuse of company email. The security team is asked to provide email logs. What is the most important reason to document the collection process and maintain a chain of custody?
Select an answer first
13application · medium
A credit card processing company wants to ensure it is following best practices for protecting cardholder data. It hires an external assessor to review its systems against the Payment Card Industry Data Security Standard (PCI DSS). What type of investigation is this?
Select an answer first
14foundation · easy
Which of the following is a key element of maintaining chain of custody?
Select an answer first
15expert · hard
A data breach occurs, and the company faces a criminal investigation by the FBI, a civil lawsuit from affected customers, and an internal administrative investigation. The security team is collecting evidence. What is the most significant challenge the team faces?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.