Question 1
An organization is developing its information security program and wants to ensure alignment with business objectives. Which role is PRIMARILY responsible for defining the acceptable level of risk for the organization?
Correct Answer:
Senior management / Board of Directors
Question 2
Which security governance principle ensures that organizational security policies are derived from and support the overall business strategy?
Correct Answer:
Strategic alignment
Question 3
A company has implemented a security policy requiring all employees to complete annual security awareness training. Six months later, a phishing attack succeeds because multiple employees clicked malicious links. What governance control is MOST lacking?
Correct Answer:
Monitoring and enforcement controls
Question 4
Which framework provides a comprehensive set of controls specifically designed for organizations handling credit card data?
Correct Answer:
PCI DSS
Question 5
An organization wants to adopt a risk management framework that is widely recognized internationally and provides a structured approach to establishing, implementing, maintaining, and continually improving an information security management system (ISMS). Which standard should they adopt?
Correct Answer:
ISO/IEC 27001
Question 1
Exam overview

About this Exam

Prepare with the CISSP Practice Questions - Certified Information Systems Security Professional Exam practice quiz. This question bank includes 100 questions covering data, security, organization, risk, and company. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CISSP Practice Questions - Certified Information Systems Security Professional Exam

This practice set contains 100 questions from the matching question bank and focuses on data, security, organization, risk, and company. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions