CISSP

Can you pass this 10-question CISSP quiz?

Ten multiple-choice questions: six on the CISSP exam itself and four on core concepts from the outline. Tap an answer to see why, with the source. Takes about five minutes.

Can you get 10 out of 10?

1 of 10How many domains are in the CISSP exam outline?

Show answer

Answer: C. Eight domains, weighted from 10% to 16%. Source: ISC2, CISSP Certification Exam Outline, effective 15 April 2024

2 of 10Which domain carries the most weight?

Show answer

Answer: B. Security and Risk Management, at 16%. Source: ISC2, CISSP Certification Exam Outline, effective 15 April 2024

3 of 10Which two domains are the lightest, at 10% each?

Show answer

Answer: A. Asset Security and Software Development Security are 10% each. Source: ISC2, CISSP Certification Exam Outline, effective 15 April 2024

4 of 10What weight does Security Assessment and Testing carry?

Show answer

Answer: B. 12%, the only domain at that weight. Source: ISC2, CISSP Certification Exam Outline, effective 15 April 2024

5 of 10How many items can the CISSP exam give you?

Show answer

Answer: B. The adaptive exam gives 100 to 150 items in up to 3 hours. Source: ISC2, Computerized Adaptive Testing

6 of 10What score do you need to pass?

Show answer

Answer: B. 700 on a 1000-point scale. Source: ISC2, Computerized Adaptive Testing

7 of 10Which principle gives people only the access their job needs?

Show answer

Answer: B. Least privilege limits access to what is needed for the assigned task. Source: NIST SP 800-53 Rev. 5, control AC-6

8 of 10What does a digital signature give that encryption alone does not?

Show answer

Answer: B. A signature proves origin and integrity, so the signer cannot credibly deny it. Source: NIST FIPS 186-5

9 of 10In continuity planning, what does the recovery time objective set?

Show answer

Answer: B. RTO is the time within which a system must be restored. Data loss is the recovery point objective. Source: NIST SP 800-34 Rev. 1

10 of 10Which of these is a detective control?

Show answer

Answer: B. Log review finds events after they happen; the others prevent or deter. Source: NIST SP 800-53 Rev. 5, control AU-6

CISSP flashcards for Anki

front,back
How many domains are in the CISSP exam outline? | A) 6 / B) 7 / C) 8 / D) 10,"C) 8. Eight domains, weighted from 10% to 16%."
Which domain carries the most weight? | A) Security Operations / B) Security and Risk Management / C) Identity and Access Management / D) Security Architecture and Engineering,"B) Security and Risk Management. Security and Risk Management, at 16%."
"Which two domains are the lightest, at 10% each? | A) Asset Security and Software Development Security / B) Asset Security and Security Operations / C) Network Security and IAM / D) Assessment and Testing and Software Development Security",A) Asset Security and Software Development Security. Asset Security and Software Development Security are 10% each.
What weight does Security Assessment and Testing carry? | A) 10% / B) 12% / C) 13% / D) 16%,"B) 12%. 12%, the only domain at that weight."
How many items can the CISSP exam give you? | A) 75 to 100 / B) 100 to 150 / C) 125 to 175 / D) Exactly 250,B) 100 to 150. The adaptive exam gives 100 to 150 items in up to 3 hours.
What score do you need to pass? | A) 600 of 1000 / B) 700 of 1000 / C) 750 of 1000 / D) 800 of 1000,B) 700 of 1000. 700 on a 1000-point scale.
Which principle gives people only the access their job needs? | A) Defense in depth / B) Least privilege / C) Fail secure / D) Security through obscurity,B) Least privilege. Least privilege limits access to what is needed for the assigned task.
What does a digital signature give that encryption alone does not? | A) Confidentiality / B) Non-repudiation / C) Availability / D) Compression,"B) Non-repudiation. A signature proves origin and integrity, so the signer cannot credibly deny it."
"In continuity planning, what does the recovery time objective set? | A) How much data you can lose / B) How long a system can be down before recovery / C) The cost of an outage / D) How often you back up",B) How long a system can be down before recovery. RTO is the time within which a system must be restored. Data loss is the recovery point objective.
Which of these is a detective control? | A) A firewall rule that blocks a port / B) Reviewing audit logs / C) Security awareness training / D) A locked server room,B) Reviewing audit logs. Log review finds events after they happen; the others prevent or deter.

Where next?

Also free: the CISSP interview questions and the CISSP mind map, plus every other credential on our study tools page. For the full syllabus, the CISSP Exam Guide and the CISSP Practice Questions go domain by domain.

Frequently asked questions

Is this CISSP quiz like the real exam?

No. It is a 10-question recall check written by Credential Press, not exam questions. Each answer cites its source.

Can I study the CISSP quiz offline?

Yes. Download the free flashcard CSV and import it into Anki or any flashcard app that reads CSV.

How many domains are in the CISSP exam outline?

8. Eight domains, weighted from 10% to 16%.

Which books go deeper on CISSP?

Cover of CISSP Exam Guide

CISSP Exam Guide

Certified Information Systems Security Professional. 14 chapters, 396 pages.

Cover of CISSP Practice Questions

CISSP Practice Questions

Practice questions with full rationales, sized to the published domain weights. 217 pages.