CISSP (Certified Information Systems Security Professional)

An ISC2-certified security manager learns that another ISC2 member at a partner firm has falsified audit evidence. Under the ISC2 Code of Ethics, what is the manager obligated to do?

1. AFollow the ISC2 ethics complaint procedureCorrect
2. BWarn the member privately only
3. CNotify only the member's employer
4. DWait for a client to report a loss

Why: The ISC2 Code of Ethics page states that members are obligated to follow the ethics complaint procedure upon observing any action by an ISC2 member that breaches the Code, and that failing to do so may itself breach Canon IV. A private warning or a report only to the employer does not meet that obligation, and nothing in the Code makes the duty wait for a client loss.

A router forwards packets between subnets by examining destination IP addresses. At which OSI layer does this forwarding decision take place?

1. ASession layer (Layer 5)
2. BData link layer (Layer 2)
3. CNetwork layer (Layer 3)Correct
4. DTransport layer (Layer 4)

Why: In the OSI reference model (ISO/IEC 7498-1) routing and logical addressing belong to the network layer, which is where IP operates. The data link layer handles frames and local hardware addressing within one link, the transport layer handles end-to-end delivery using ports, and the session layer manages dialogues between applications.