10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The C)ISSO exam has 100 questions and runs 2 hours.
These 10 free C)ISSO questions are organized by exam domain, so you can see how each part of the Certified Information Systems Security Officer blueprint is tested. Reveal the answer and explanation under each question.
A security officer identifies a database vulnerability with no evidence of exploitation. A patch is scheduled during the next maintenance window. Which risk response is being applied?
Correct answer: B - Mitigate the risk
Which security model primarily enforces confidentiality by preventing subjects from reading data at a higher classification level?
Correct answer: A - Bell-LaPadula
A company encrypts large archives while minimizing processing overhead. Which cryptographic approach is most appropriate?
Correct answer: C - Symmetric encryption
An organization assigns permissions according to job functions such as auditor and administrator. Which access control model best fits this design?
Correct answer: A - Role-based access control
A company finds sensitive records are retained indefinitely. Which data security activity should be addressed first?
Correct answer: B - Define retention and secure deletion rules
Security logs show an account downloading hundreds of unusual files outside normal hours. What is the best initial action?
Correct answer: B - Investigate using monitoring records
Which network design principle limits attacker movement after one system is compromised?
Correct answer: A - Network segmentation
A company prevents one employee from approving and implementing a sensitive change. Which principle is applied?
Correct answer: B - Separation of duties
Developers discover application input is inserted into database queries without validation. Which vulnerability is most likely?
Correct answer: A - Injection
After identifying malware-affected systems, an incident team prevents further spread while preserving evidence. Which phase is occurring?
Correct answer: B - Containment
The C)ISSO exam also covers these domains. Drill them in the full free practice test:
The full bank has 1,020 more C)ISSO questions with explanations.
Continue in the free practice test →
View plans