20+ practice questions focused on Law Ethics And Security Compliance Management — one of the most tested topics on the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP, Aug 2025 blueprint) (ISC) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Law Ethics And Security Compliance Management PracticeA security manager is conducting a third-party risk assessment using the NIST Cybersecurity Framework. Which tool in the AWS Artifact portal is most appropriate for obtaining the necessary SOC 2 Type II reports to fulfill compliance auditing requirements?
Explanation: The stem mentions 'the NIST Cybersecurity Framework', but the question specifically asks for a tool in the 'AWS Artifact portal' to obtain SOC 2 Type II reports, which makes it vendor-specific to AWS rather than a vendor-neutral NIST CSF question. Additionally, the stem mixes generic risk assessment frameworks with specific AWS product names.
To ensure adherence to the PCI DSS 4.0 requirement for log integrity, which configuration in a centralized SIEM like Splunk is mandatory to prevent unauthorized modification of audit logs?
Explanation: PCI DSS 4.0 requires cryptographic verification or WORM storage for logs to ensure their integrity.
A Chief Information Security Officer (CISO) is establishing an ethics program. Which framework provides the most comprehensive international standard for establishing an Information Security Management System (ISMS) encompassing compliance and ethical conduct?
Explanation: COBIT 2019 is a governance and management framework that provides a comprehensive approach encompassing enterprise governance, compliance, risk management, and ethical conduct for information and technology. While ISO/IEC 27001 is the standard for an ISMS, COBIT explicitly integrates the governance and ethical compliance aspects requested.
A multinational organization is deploying an automated compliance monitoring solution across its cloud environments. Which GDPR-related mechanism must the security manager prioritize when configuring data residency policies in Microsoft Purview to ensure automated cross-border transfer controls?
Explanation: Microsoft Purview provides Data Residency and Compliance Manager solutions, but for classifying, protecting, and applying policy controls to specific data types for cross-border transfer or residency requirements under GDPR, Information Protection sensitivity labels are used. However, Azure Policy (or specifically Microsoft Purview data residency controls/localization features) is more directly tied to infrastructure and service-level data residency. Wait, let's look closer: Microsoft Purview uses Information Protection sensitivity labels to enforce encryption and marking, but data residency policies for storing data at rest in specific regions are managed natively via Microsoft Purview boundaries / Azure region deployments. Actually, the best mechanism in Purview for data residency and automated governance is Purview Data Map / Data Estate insights, or Azure Policy for resource deployment location. But if the question specifically targets Microsoft Purview features related to GDPR data residency and cross-border transfers, Information Protection sensitivity labels do not inherently control data residency (storage location). Data residency is typically controlled at the service deployment level or via Microsoft 365 Multi-Geo. Let's correct this to reflect that Azure Policy definitions or service-level residency configurations are used, or fix the correct option to a configuration that matches Microsoft Purview's actual architecture.
A firm must adhere to the EU's Digital Operational Resilience Act (DORA). Which activity is the primary compliance requirement for 'Third-Party Risk Management' under this regulation?
Explanation: Under DORA (Digital Operational Resilience Act), Third-Party Risk Management primarily revolves around maintaining a complete register of information regarding all ICT third-party service providers, ensuring rigorous due diligence, embedding mandatory contractual requirements (such as access and audit rights, termination rights, and exit strategies), and ongoing monitoring.
+15 more Law Ethics And Security Compliance Management questions available
Practice all Law Ethics And Security Compliance Management questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Law Ethics And Security Compliance Management. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Law Ethics And Security Compliance Management questions on the ISC frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Law Ethics And Security Compliance Management is tested as part of the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP, Aug 2025 blueprint) (ISC) blueprint. Practicing with targeted Law Ethics And Security Compliance Management questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free ISC practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Law Ethics And Security Compliance Management is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Law Ethics And Security Compliance Management practice session with instant scoring and detailed explanations.
Start Law Ethics And Security Compliance Management Practice →