Security Assessment, Testing & Operations
37 practice questions with explanations — 15 free to try
PassNova has 37 CISSP practice questions on Security Assessment, Testing & Operations, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Security Assessment, Testing & Operations: example questions & answers
2 worked examples with answers and explanations below. Try 15 CISSP questions free in the browser; the full 37-question Security Assessment, Testing & Operations bank is part of PassNova Premium.
Which type of penetration test provides the tester with complete knowledge of the target environment, including source code, network diagrams, and architecture documentation?
- AGray-box testing
- BWhite-box testing✓
- CBlind testing
- DBlack-box testing
Answer: White-box testing gives the tester full knowledge of the environment, including source code and architecture, to enable thorough analysis.
During a security assessment, a tool examines an application's source code without executing it to identify vulnerabilities such as buffer overflows. Which testing technique is this?
- AFuzz testing with random inputs
- BPenetration testing
- CDynamic Application Security Testing (DAST)
- DStatic Application Security Testing (SAST)✓
Answer: Static Application Security Testing (SAST) analyzes source code or binaries without executing the program to find coding flaws.