CISSP Practice Exam: Special Edition for Zero to Hero Project

1. "AetherLink Solutions," a satellite communications provider, handles vast amounts of real-time telemetry data, secure command and control signals, and encrypted customer communications. This data is consistently "in motion" across its geographically dispersed ground stations and satellite uplinks. Ensuring the integrity and authenticity of these communications is paramount, as any compromise could have severe operational and national security implications. The head of network security, Maria, is tasked with reviewing existing protocols and implementing enhancements to guarantee that all data transmitted is precisely what the sender intended, without unauthorized alteration, and that the sender's identity is verifiable by the recipient. Which cryptographic goal is Maria primarily striving to achieve for the data in motion, and what is the most effective approach to fulfill both aspects of this goal?

2. "AquaControl Utilities," a water treatment plant, relies on a complex network of programmable logic controllers (PLCs) and remote terminal units (RTUs) to monitor and manage its water purification and distribution processes. The plant's operational technology (OT) network is distinct from its IT network, and ensuring the continuous, safe, and reliable operation of these specialized systems is paramount, as any disruption could have severe public health and safety consequences. Security considerations for these systems often prioritize safety and availability over traditional IT confidentiality. Which specialized category of network systems, critical for managing physical processes like those at AquaControl Utilities, requires a distinct security approach emphasizing safety and availability?

3. "ArchiveSolutions," a data archival company, is undertaking a large-scale project to dispose of thousands of obsolete magnetic backup tapes. To ensure no sensitive client data remains on these tapes after disposal, the company's data destruction policy mandates the complete elimination of all residual datThe security team is reviewing common methods for this process. Which of the following methods is <u>not</u> considered an effective or primary approach for securely eliminating residual data from <u>magnetic tapes</u>?