2 packs: 15% off with code BUY2. 3 or more: 20% off with code BUY3.

ISC2 CISSP-ISSMP Exam Practice Questions, practice question pack
ISC2 · CISSP-ISSMP

ISC2 CISSP-ISSMP Exam Practice Questions

99% pass rateUpdated 1 Nov 2026218 questions2 PDFs by email
5.03 reviews
(3 customer reviews)

US$39

Every question with the correct answer and why the other options are wrong.

Download the free sample

Card, Apple Pay, Google Pay or PayPal. Your PDF is prepared and emailed to you after checkout, usually within a few hours.

99% pass rate. Pass or your money back.Fail the exam after using this pack and we refund it, or swap it for any other pack. How the guarantee works
If you are a serious learner and really want to pass the CISSP-ISSMP exam with a good grade but your preparation is not going well, I suggest giving Cert Stash exam dumps a chance. You'll not disappointed
WesleyCISSP-ISSMP
Category:
TRY BEFORE YOU BUY

Three of the 218 questions in this pack

Question 1

Which of the following security models dictates that subjects can only access objects through applications?

  1. Biba-Clark model
  2. Bell-LaPadula
  3. Clark-Wilson
  4. Biba model
Show answer and explanation

Correct answer: C. Clark-Wilson

The Clark-Wilson model is an integrity-based security model that enforces the principle that subjects can only access objects through applications, not directly. This model includes well-formed transactions and separation of duties to maintain data integrity. Applications act as intermediaries that enforce business rules and constraints on data access.

Why the other options are wrong

  • A. Biba-Clark model does not exist as a standard security model.
  • B. Bell-LaPadula is a confidentiality model focused on preventing information disclosure through read-down and write-up restrictions, not application-mediated access.
  • D. The Biba model addresses integrity through strict controls but does not specifically mandate application-mediated access like Clark-Wilson does.

Question 2

Which of the following relies on a physical characteristic of the user to verify his identity?

  1. Social Engineering
  2. Kerberos v5
  3. Biometrics
  4. CHAP
Show answer and explanation

Correct answer: C. Biometrics

Biometrics relies on physical characteristics of a user such as fingerprints, iris scans, facial recognition, or voice patterns to verify identity. These are inherent to the individual and cannot be easily lost or stolen like passwords or tokens.

Why the other options are wrong

  • A. Social engineering is a manipulation technique used to deceive users, not an authentication method.
  • B. Kerberos v5 is a network authentication protocol using tickets and cryptography, not physical characteristics.
  • D. CHAP (Challenge Handshake Authentication Protocol) is a network authentication protocol using password-based challenges, not biometric verification.

Question 3

Which of the following types of activities can be audited for security? Each correct answer represents a complete solution. Choose three.

  1. Data downloading from the Internet
  2. File and object access
  3. Network logons and logoffs
  4. Printer access
Show answer and explanation

Correct answer: B, C, D. File and object access; Network logons and logoffs; Printer access

File and object access, network logons and logoffs, and printer access are all common auditable security activities that organizations track to monitor system usage and security events. These activities generate logs that help detect unauthorized access, policy violations, and security incidents. Data downloading from the Internet is not typically classified as a standard auditable security activity in most audit frameworks.

Why the other options are wrong

  • A. Data downloading from the Internet is not a standard security audit activity that most organizations formally track in their audit logs.

See all 48 free questions Get the full pack, US$39

REVIEWS

3 reviews for ISC2 CISSP-ISSMP Exam Practice Questions

  1. Wesley –

    If you are a serious learner and really want to pass the CISSP-ISSMP exam with a good grade but your preparation is not going well, I suggest giving Cert Stash exam dumps a chance. You'll not disappointed

  2. Zach Sid –

    Quality of these dumps were upto the mark. 100% recommended

  3. Yusuf Kuznetsov –

    Thanks for this

    Useful for ISSMP prep

Only logged in customers who have purchased this product may leave a review.

How much of the ISC2 CISSP-ISSMP bank is free?

218 questions in the bank

Each step includes the one before, so buying only adds new questions.

  • You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
  • 4822% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
  • 104the first half of the packHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
  • 218100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
ABOUT THIS PACK

What’s in the ISC2 CISSP-ISSMP pack

  • 218 questions mapped to the ISSMP exam objectives
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Delivered by email shortly after checkout
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

An ISSMP attempt costs US$599. This pack is US$39, paid once.

What makes the ISSMP hard

ISSMP is the CISSP concentration for people running the security programme rather than the firewall, and it leans even further into management judgement than the CISSP already does.

The exam lives at the leadership layer: aligning the security programme to business strategy, lifecycle and vendor management, risk decisions framed as trade-offs, security operations and incident management from the coordinator's chair, and contingency planning including BIA, RTO and RPO and exercise types. The classic ISC2 trap intensifies here, where every option is defensible and the scored one is whatever the accountable manager does first.

Leadership and risk carry the exam: leadership and organisational management is 21% and risk management 20%, with security operations at 18%, roughly 60% of the paper before reaching lifecycle, contingency or compliance. This pack has 218 practice questions for the ISSMP.

About the exam

CISSP-ISSMP certifies security leadership and programme management as a CISSP concentration: leadership and organisational management, systems lifecycle management, risk, security operations, contingency management, and law, ethics and compliance. It requires a CISSP in good standing plus 2 years of management experience, and is maintained under the CISSP CPE cycle.

Questions before you buy

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

What is your pass rate?

99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products