CISSP Cybersecurity Certification Sample Test

Try 5 free practice questions with instant feedback. See how ready you are.

Loading quiz...

Sample Questions

Question 1

What is the formula used to calculate Annual Loss Expectancy (ALE)?

Answer: ALE = Single Loss Expectancy (SLE) × Annualized Rate of Occurrence (ARO). It represents the expected yearly financial loss from a specific threat.

Question 2

What is the difference between a threat and a vulnerability in risk management?

Answer: A threat is any potential danger that can exploit a weakness, while a vulnerability is a weakness or gap in a system that can be exploited. A threat agent acts on a threat to exploit a vulnerability.

Question 3

What are the four primary risk response strategies?

Answer: The four strategies are: Risk Avoidance (eliminate the risk), Risk Transfer (shift risk to a third party), Risk Mitigation (reduce the likelihood or impact), and Risk Acceptance (acknowledge and accept the risk).

Question 4

What does Single Loss Expectancy (SLE) represent and how is it calculated?

Answer: SLE represents the monetary loss expected from a single occurrence of a specific threat. It is calculated as: SLE = Asset Value (AV) × Exposure Factor (EF).

Question 5

What is residual risk?

Answer: Residual risk is the risk that remains after security controls have been applied to mitigate the total risk. It equals Total Risk minus the risk reduced by controls.