[{"id":"isc2cissp-101","domain":"security-risk-management","topic":"Professional ethics","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-102","domain":"security-risk-management","topic":"Professional ethics","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-103","domain":"security-risk-management","topic":"Security concepts","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-104","domain":"security-risk-management","topic":"Security concepts","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-105","domain":"security-risk-management","topic":"Privacy principles","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-106","domain":"security-risk-management","topic":"Security governance","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-107","domain":"security-risk-management","topic":"Security governance","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-108","domain":"security-risk-management","topic":"Security governance","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-109","domain":"security-risk-management","topic":"Legal and regulatory","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-110","domain":"security-risk-management","topic":"Legal and regulatory","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-111","domain":"security-risk-management","topic":"Intellectual property","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-112","domain":"security-risk-management","topic":"Investigations","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-113","domain":"security-risk-management","topic":"Investigations","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-114","domain":"security-risk-management","topic":"Policy hierarchy","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-115","domain":"security-risk-management","topic":"Policy hierarchy","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-116","domain":"security-risk-management","topic":"Security awareness","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-117","domain":"security-risk-management","topic":"Business continuity","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-118","domain":"security-risk-management","topic":"Business continuity","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-119","domain":"security-risk-management","topic":"Business continuity","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-120","domain":"security-risk-management","topic":"Personnel security","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-121","domain":"security-risk-management","topic":"Personnel security","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-122","domain":"security-risk-management","topic":"Risk management","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-123","domain":"security-risk-management","topic":"Risk management","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-124","domain":"security-risk-management","topic":"Risk management","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-125","domain":"security-risk-management","topic":"Risk management","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-126","domain":"security-risk-management","topic":"Risk management","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-127","domain":"security-risk-management","topic":"Continuous monitoring","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-128","domain":"security-risk-management","topic":"Risk management","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-129","domain":"security-risk-management","topic":"Risk management frameworks","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-130","domain":"security-risk-management","topic":"Threat modeling","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-131","domain":"security-risk-management","topic":"Supply chain risk","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-001","domain":"security-risk-management","topic":"Quantitative risk analysis","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-132","domain":"asset-security","topic":"Data classification","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-133","domain":"asset-security","topic":"Data owner role","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-134","domain":"asset-security","topic":"Asset classification","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-135","domain":"asset-security","topic":"Asset management","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-136","domain":"asset-security","topic":"Handling requirements","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-137","domain":"asset-security","topic":"Marking and labeling","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-138","domain":"asset-security","topic":"Asset inventory","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-139","domain":"asset-security","topic":"Secure provisioning","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-140","domain":"asset-security","topic":"Data roles","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-141","domain":"asset-security","topic":"Standards selection","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-142","domain":"asset-security","topic":"Data collection","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-143","domain":"asset-security","topic":"Data location","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-144","domain":"asset-security","topic":"Data retention","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-145","domain":"asset-security","topic":"Data remanence","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-146","domain":"asset-security","topic":"Data destruction","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-147","domain":"asset-security","topic":"End of life","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-148","domain":"asset-security","topic":"Data states","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-149","domain":"asset-security","topic":"Scoping and tailoring","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-150","domain":"asset-security","topic":"Data protection methods","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-004","domain":"asset-security","topic":"Data ownership","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-151","domain":"security-architecture-engineering","topic":"Least privilege","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-152","domain":"security-architecture-engineering","topic":"Zero trust","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-153","domain":"security-architecture-engineering","topic":"Threat modeling","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-154","domain":"security-architecture-engineering","topic":"Fail securely","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-155","domain":"security-architecture-engineering","topic":"Shared responsibility","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-156","domain":"security-architecture-engineering","topic":"Privacy by design","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-157","domain":"security-architecture-engineering","topic":"Biba model","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-158","domain":"security-architecture-engineering","topic":"Secure defaults","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-159","domain":"security-architecture-engineering","topic":"Defense in depth","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-160","domain":"security-architecture-engineering","topic":"Control tailoring","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-161","domain":"security-architecture-engineering","topic":"Trusted Platform Module","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-162","domain":"security-architecture-engineering","topic":"Industrial control systems","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-163","domain":"security-architecture-engineering","topic":"Microservices and APIs","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-164","domain":"security-architecture-engineering","topic":"IoT security","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-165","domain":"security-architecture-engineering","topic":"Containers","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-166","domain":"security-architecture-engineering","topic":"Database inference","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-167","domain":"security-architecture-engineering","topic":"Key compromise","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-168","domain":"security-architecture-engineering","topic":"Post-quantum planning","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-169","domain":"security-architecture-engineering","topic":"Side-channel attacks","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-170","domain":"security-architecture-engineering","topic":"Man-in-the-middle attacks","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-171","domain":"security-architecture-engineering","topic":"Site selection","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-172","domain":"security-architecture-engineering","topic":"Fire protection","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-173","domain":"security-architecture-engineering","topic":"Separation of duties","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-174","domain":"security-architecture-engineering","topic":"Verification and validation","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-175","domain":"security-architecture-engineering","topic":"Retirement and disposal","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-005","domain":"security-architecture-engineering","topic":"Security models","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-176","domain":"communication-network-security","topic":"Legacy device segmentation","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-177","domain":"communication-network-security","topic":"Zero trust principles","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-178","domain":"communication-network-security","topic":"Rogue access point","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-179","domain":"communication-network-security","topic":"Third-party connectivity","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-180","domain":"communication-network-security","topic":"Legacy TLS dependency","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-181","domain":"communication-network-security","topic":"SDN risk","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-182","domain":"communication-network-security","topic":"Firewall rule policy","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-183","domain":"communication-network-security","topic":"Network access control","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-184","domain":"communication-network-security","topic":"Source address validation","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-185","domain":"communication-network-security","topic":"SSL VPN remote access","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-186","domain":"communication-network-security","topic":"BYOD remote access","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-187","domain":"communication-network-security","topic":"Voice network protection","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-188","domain":"communication-network-security","topic":"Out-of-band management","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-189","domain":"communication-network-security","topic":"IPv6 visibility","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-190","domain":"communication-network-security","topic":"CDN and sensitive content","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-191","domain":"communication-network-security","topic":"Encrypted traffic monitoring","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-192","domain":"communication-network-security","topic":"Satellite backhaul","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-193","domain":"communication-network-security","topic":"Endpoint protection for roaming staff","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-194","domain":"communication-network-security","topic":"Firewall layer","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-195","domain":"communication-network-security","topic":"DMZ design","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-196","domain":"communication-network-security","topic":"Split tunneling decision","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-197","domain":"communication-network-security","topic":"Management plane protection","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-198","domain":"communication-network-security","topic":"Enterprise wireless authentication","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-199","domain":"communication-network-security","topic":"Converged storage traffic","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-200","domain":"communication-network-security","topic":"DDoS response","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-006","domain":"communication-network-security","topic":"IPsec modes","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-201","domain":"identity-access-management","topic":"Kerberos authentication","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-202","domain":"identity-access-management","topic":"Separation of duties","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-203","domain":"identity-access-management","topic":"Least privilege","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-204","domain":"identity-access-management","topic":"Provisioning lifecycle","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-205","domain":"identity-access-management","topic":"Deprovisioning","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-206","domain":"identity-access-management","topic":"Authenticator assurance","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-207","domain":"identity-access-management","topic":"Federation","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-208","domain":"identity-access-management","topic":"Federation risk","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-209","domain":"identity-access-management","topic":"ABAC","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-210","domain":"identity-access-management","topic":"RBAC","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-211","domain":"identity-access-management","topic":"MAC vs DAC","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-212","domain":"identity-access-management","topic":"PDP and PEP","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-213","domain":"identity-access-management","topic":"Access control list","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-214","domain":"identity-access-management","topic":"Multifactor authentication","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-215","domain":"identity-access-management","topic":"Zero trust access","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-216","domain":"identity-access-management","topic":"Identity proofing","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-217","domain":"identity-access-management","topic":"Session management","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-218","domain":"identity-access-management","topic":"Password manager","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-219","domain":"identity-access-management","topic":"Passwordless authentication","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-220","domain":"identity-access-management","topic":"Biometrics","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-221","domain":"identity-access-management","topic":"Federation roles","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-222","domain":"identity-access-management","topic":"Risk-based access","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-223","domain":"identity-access-management","topic":"Federated trust","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-224","domain":"identity-access-management","topic":"Discretionary access control","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-225","domain":"identity-access-management","topic":"Single sign-on","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-002","domain":"identity-access-management","topic":"Privilege creep","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-226","domain":"security-assessment-testing","topic":"Audit strategy","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-227","domain":"security-assessment-testing","topic":"DR and BC process data","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-228","domain":"security-assessment-testing","topic":"Audit location","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-229","domain":"security-assessment-testing","topic":"Vulnerability assessment","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-230","domain":"security-assessment-testing","topic":"Penetration testing","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-231","domain":"security-assessment-testing","topic":"Test knowledge levels","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-232","domain":"security-assessment-testing","topic":"Red, blue and purple teams","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-233","domain":"security-assessment-testing","topic":"Log reviews","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-234","domain":"security-assessment-testing","topic":"Synthetic transactions","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-235","domain":"security-assessment-testing","topic":"Code review","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-236","domain":"security-assessment-testing","topic":"Misuse case testing","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-237","domain":"security-assessment-testing","topic":"Coverage analysis","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-238","domain":"security-assessment-testing","topic":"Interface testing","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-239","domain":"security-assessment-testing","topic":"Breach and attack simulation","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-240","domain":"security-assessment-testing","topic":"Security process data","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-241","domain":"security-assessment-testing","topic":"KPIs and KRIs","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-242","domain":"security-assessment-testing","topic":"Backup verification","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-243","domain":"security-assessment-testing","topic":"Compliance checks","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-244","domain":"security-assessment-testing","topic":"Exception handling","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-245","domain":"security-assessment-testing","topic":"Remediation tracking","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-246","domain":"security-assessment-testing","topic":"Ethical disclosure","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-247","domain":"security-assessment-testing","topic":"Training and awareness","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-248","domain":"security-assessment-testing","topic":"Continuous monitoring","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-007","domain":"security-assessment-testing","topic":"Dynamic testing","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-249","domain":"security-operations","topic":"Forensic investigation","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-250","domain":"security-operations","topic":"Legal and regulatory investigations","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-251","domain":"security-operations","topic":"Log management","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-252","domain":"security-operations","topic":"Monitoring and alert tuning","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-253","domain":"security-operations","topic":"Configuration baselines","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-254","domain":"security-operations","topic":"Application allowlisting","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-255","domain":"security-operations","topic":"Least privilege and separation of duties","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-256","domain":"security-operations","topic":"Privileged account management","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-257","domain":"security-operations","topic":"Resource protection","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-258","domain":"security-operations","topic":"Honeypots","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-259","domain":"security-operations","topic":"Incident triage","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-260","domain":"security-operations","topic":"Backup storage strategy","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-261","domain":"security-operations","topic":"SIEM correlation","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-262","domain":"security-operations","topic":"Fault tolerance and high availability","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-263","domain":"security-operations","topic":"Detective and preventive controls","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-264","domain":"security-operations","topic":"Patch prioritization","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-265","domain":"security-operations","topic":"Legacy systems","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-266","domain":"security-operations","topic":"Change management","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-267","domain":"security-operations","topic":"Sandboxing","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-268","domain":"security-operations","topic":"Recovery strategy selection","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-269","domain":"security-operations","topic":"Disaster recovery response","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-270","domain":"security-operations","topic":"DR testing","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-271","domain":"security-operations","topic":"Business continuity planning","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-272","domain":"security-operations","topic":"Physical security","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-273","domain":"security-operations","topic":"Personnel safety","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-008","domain":"security-operations","topic":"Recovery sites","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-274","domain":"software-development-security","topic":"SDLC security","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-275","domain":"software-development-security","topic":"Maturity models","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-276","domain":"software-development-security","topic":"Operations and maintenance","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-277","domain":"software-development-security","topic":"DevSecOps","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-278","domain":"software-development-security","topic":"Integrated Product Team","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-279","domain":"software-development-security","topic":"CI/CD pipeline security","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-280","domain":"software-development-security","topic":"Code repositories","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-281","domain":"software-development-security","topic":"Application security testing","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-282","domain":"software-development-security","topic":"SSDF terminology","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-283","domain":"software-development-security","topic":"Software configuration management","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-284","domain":"software-development-security","topic":"Auditing and logging of changes","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-285","domain":"software-development-security","topic":"Acquired software risk","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-286","domain":"software-development-security","topic":"Open source risk","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-287","domain":"software-development-security","topic":"Release integrity","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-288","domain":"software-development-security","topic":"Secure coding standards","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-289","domain":"software-development-security","topic":"API security","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"isc2cissp-290","domain":"software-development-security","topic":"Risk analysis of software","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"isc2cissp-291","domain":"software-development-security","topic":"AI-assisted coding","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"isc2cissp-292","domain":"software-development-security","topic":"ML supply chain","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"isc2cissp-003","domain":"software-development-security","topic":"SQL injection defenses","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1}]