Security Assessment, Testing & Operations
51 practice questions with explanations — 15 free to try
2 of these 51 questions are in the free 15-question taster · the full topic is part of Premium
PassNova has 51 CISSP practice questions on Security Assessment, Testing & Operations, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Security Assessment, Testing & Operations: example questions & answers
2 worked examples with answers and explanations below. Try 15 CISSP questions free in the browser; the full 51-question Security Assessment, Testing & Operations bank is part of PassNova Premium.
Which type of penetration test provides the tester with complete knowledge of the target environment, including source code, network diagrams, and architecture documentation?
- AGray-box testing
- BWhite-box testing✓
- CBlind testing
- DBlack-box testing
Answer: White-box testing gives the tester full knowledge of the environment, including source code and architecture, to enable thorough analysis.
After a round of automated application tests, a manager asks what proportion of the code's branches and functions were actually exercised, to judge how much of the application remains untested. Which measure answers this?
- AMean time to repair
- BCyclomatic complexity
- CDefect density
- DTest coverage analysis✓
Answer: Coverage analysis reports how much of the code (statements, branches, functions or conditions) the tests actually exercised, revealing untested paths. Cyclomatic complexity counts the independent paths through the code without saying which were tested, defect density measures defects per unit of code, and mean time to repair is an operational maintenance metric.