CISSP Practice Test

CISSP practice test: what's covered

• Security & Risk Management

Free CISSP sample questions

1. The CIA triad consists of:

   • A. Confidentiality, Integrity, Availability
   • B. Compliance, Identity, Audit
   • C. Control, Identity, Authority
   • D. Confidentiality, Identification, Authentication
   Show answer

   Correct: A. CIA = the foundational security objectives. Correct choice is "Confidentiality, Integrity, Availability" because it directly fulfills the governance and risk requirement. Other options such as "Compliance, Identity, Audit and Control, Identity, Authority" are incorrect because they either misrepresent the core security standard or apply to unrelated operational domains.

2. The DAD triad represents:

   • A. The opposite of CIA: Disclosure, Alteration, Destruction
   • B. Detect, Analyze, Defend
   • C. Data, Apps, Devices
   • D. Designation, Authority, Disposition
   Show answer

   Correct: A. DAD describes the threats to CIA — what we are protecting against. Correct choice is "The opposite of CIA: Disclosure, Alteration, Destruction" because it directly fulfills the governance and risk requirement. Other options such as "Detect, Analyze, Defend and Data, Apps, Devices" are incorrect because they either misrepresent the core security standard or apply to unrelated operational domains.

3. AAA refers to:

   • A. Authentication, Authorization, Accounting (Audit)
   • B. Access, Approve, Acknowledge
   • C. Allocation, Assignment, Audit
   • D. Asset, Authority, Action
   Show answer

   Correct: A. AAA is the standard access control framework. Correct choice is "Authentication, Authorization, Accounting (Audit)" because it directly fulfills the governance and risk requirement. Other options such as "Access, Approve, Acknowledge and Allocation, Assignment, Audit" are incorrect because they either misrepresent the core security standard or apply to unrelated operational domains.

4. IAAA extends AAA by adding:

   • A. Identification at the start
   • B. Inspection
   • C. Integrity
   • D. Insurance
   Show answer

   Correct: A. IAAA = Identification, Authentication, Authorization, Accounting. Correct choice is "Identification at the start" because it directly fulfills the governance and risk requirement. Other options such as "Inspection and Integrity" are incorrect because they either misrepresent the core security standard or apply to unrelated operational domains.

5. Non-repudiation PRIMARILY ensures that:

   • A. Data is encrypted
   • B. A party cannot credibly deny having performed an action — typically achieved via digital signatures
   • C. Backups exist
   • D. Logs are retained forever
   Show answer

   Correct: B. Non-repudiation = proof of origin and integrity binding the actor. Correct choice is "A party cannot credibly deny having performed an action — typically achieved via digital signatures" because it directly fulfills the governance and risk requirement. Other options such as "Data is encrypted and Backups exist" are incorrect because they either misrepresent the core security standard or apply to unrelated operational domains.

Last updated: 2026-10-19

CISSP practice test FAQ

Related practice tests

• CISSP practice test
• ISC2 CC practice test
• ISC2 CCSP practice test
• ISC2 CGRC practice test
• ISC2 SSCP practice test