Back to CISSP

Security Assessment Methodologies

Assess security controls

This subtopic covers the different methodologies used to assess security controls and determine the effectiveness in mitigating threats to the organization's assets.
5 minutes 5 Questions

Concepts covered: Privacy Impact Assessment, Security Risk Management, Red Teaming, Compliance Auditing, Incident Response Assessment, Business Impact Analysis, Security Architecture Review, Risk Analysis, Configuration Review, Secure Code Review

Test mode:
Start practice test
CISSP - Security Assessment Methodologies Example Questions

Test your knowledge of Amazon Simple Storage Service (S3)

Question 1

Which of the following is NOT an authentication factor?

Correct Answer: Authorization

Authorization is not an authentication factor, but it is a related process that follows authentication. The other answer choices are authentication factors.

Question 2

Which of the following attacks involves intercepting and altering communication between two parties, without their knowledge or consent?

Correct Answer: Man-in-the-middle (MitM) attack

A MitM attack involves intercepting and altering communication between two parties, which can result in data theft or other malicious activity. A DoS attack involves overwhelming a system or network with traffic or requests, making it unavailable for legitimate use. Phishing and social engineering attacks rely on tricking users into revealing sensitive information. A buffer overflow involves exploiting a program's memory allocation to execute malicious code.

Question 3

What is the purpose of a code review in the context of security assessments?

Correct Answer: To identify security vulnerabilities and coding errors in software

A code review is used to identify security vulnerabilities and coding errors in software that could potentially be exploited by attackers. By identifying these vulnerabilities and errors, the software can be made more secure.

Go Premium

CISSP Preparation Package (2024)

  • 4537 Superior-grade CISSP practice questions.
  • Accelerated Mastery: Deep dive into critical topics to fast-track your mastery.
  • Unlock Effortless CISSP preparation: 5 full exams.
  • 100% Satisfaction Guaranteed: Full refund with no questions if unsatisfied.
  • Bonus: If you upgrade now you get upgraded access to all courses
  • Risk-Free Decision: Start with a 7-day free trial - get premium features at no cost!
More Security Assessment Methodologies questions
136 questions (total)
Start 100 question test