CISSP Practice Tests: Security Decisions Across 8 Domains

The facts establish both a public-safety hazard and a required notification. The security manager should preserve an accurate record and ensure the lawful safety path proceeds, using authorized escalation when an executive tries to suppress it. ISC2's published ethics canons still require protection of society and honest, responsible conduct; the newer professional-conduct guidance builds on those canons rather than replacing them.

Review next: When employer pressure conflicts with a confirmed public-safety duty, identify the actual obligation and an authorized way to fulfill it.

The policy service cannot evaluate new remote requests. Secure failure denies optional privileged sessions, while the independent local shutdown path meets the stated safety requirement. A fail-secure design must account for the function's availability needs rather than indiscriminately disabling every control.

Review next: When a dependency fails, state which action must remain available before deciding whether each access path fails open or closed.

The attack is verifier impersonation with live relay. NIST SP 800-63B-4 recognizes verifier-name binding, including WebAuthn, as phishing-resistant because an output for the lookalike name cannot authenticate to the real verifier. Manually entered OTPs, whether sent by SMS or email, lack that binding; the email choice also violates NIST's out-of-band authentication rule.

Review next: Ask whether the authenticator output is cryptographically bound to the real verifier, not merely whether there are two factors.