Chapter 6: Security Assessment and Testing Domain 6 Practice Questions

Questions from the following topics are included in this domain:

  • Designing and validating assessments and tests
  • Conducting security control testing
  • Collecting security process data
  • Analyzing test output data and generating reports
  • Conducting and facilitating security audits

To pass the CISSP exam, you must score high in the Security Assessment and Testing domain. Domain 6 has a 12% weighting on the exam and requires you to understand how to design and validate assessments and audits. Audits need to be done within the organization and, externally, acting as if a black hat hacker were performing them.

Security control testing includes vulnerability scanning and assessment, ...

Get CISSP (ISC)² Certification Practice Exams and Tests now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.