How to answer CISSP 'think like a manager' questions

The decision hierarchy

When several answers look correct, apply the canonical priority order: life safety first, then legal and regulatory compliance, then business continuity, then cost.

Prefer answers that assess before acting, involve senior management, apply the least privilege principle, and document decisions.

Red flags in wrong answers

Answers that jump straight to buying technology, that bypass change control, or that delegate accountability downwards are almost always wrong.