Practise Certified Information Systems Security Professional (CISSP) with a short sample and answer explanations. These are independent learning materials, not official exam questions or a pass prediction.
Exam outline and official sources
ISC2 · ISC2 CISSP Certification Exam Outline, effective April 15, 2024; linked English PDF marked v9/2024. Official webpage and PDF opened on 2026-10-11. The workbook's '- Healthcare' suffix is interpreted as a contextual preparation label for CISSP, whose official scope covers information security across industries. The assigned slug is preserved; no separate healthcare CISSP examination was evidenced.
This original 20-question sample covers selected topics across the outline. It does not reproduce official exam questions or cover every tested topic.
- CISSP — Certified Information Systems Security Professional
- CISSP Certification Exam Outline
- CISSP Certification Exam Outline — English
- HCISPP — HealthCare Information Security and Privacy Practitioner
- NIST SP 800-53 Revision 5 — Security and Privacy Controls for Information Systems and Organizations
- NIST SP 800-88 Revision 2 — Guidelines for Media Sanitization
- NIST SP 800-34 Revision 1 — Contingency Planning Guide for Federal Information Systems
- NIST SP 800-61 Revision 3 — Incident Response Recommendations and Considerations for Cybersecurity Risk Management
- NIST SP 800-63B-4 — Digital Identity Guidelines: Authentication and Authenticator Management
- NIST SP 800-218 — Secure Software Development Framework, Version 1.1
- FIPS 186-5 — Digital Signature Standard
- RFC 9525 — Service Identity in TLS
- OWASP SQL Injection Prevention Cheat Sheet
Certified Information Systems Security Professional (CISSP)
Start with 20 free questions, then review the explanations and any topics you missed.
A hospital security analyst finds a residual risk that remains after planned controls are applied. The risk is within the organization's documented tolerance, but the analyst has no delegated authority to accept it. What is the best next step?
Certified Information Systems Security Professional (CISSP)
Flashcards
Security and Risk Management
1.6 — Policy, standards and procedures
Get started with Certified Information Systems Security Professional (CISSP)
Purchase your plan, then choose the module to enable. Your plan renews until canceled.
Monthly exam plan
$147 / month
About $4.90 per day
Enable one exam module after payment
Published questions, flashcards and study tools
Renews until canceled
Yearly exam plan
$1337 / year
About $3.66 per day
Enable one exam module after payment
Published questions, flashcards and study tools
Renews until canceled
Found an issue? See our content policy and report a correction.