Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 148

Question list

List of questions

Question 1471

(0)

What are the first two components of logical access control?

Question 1472

(0)

What is the MAIN purpose of a security assessment plan?

Question 1473

(0)

What is the MAIN purpose of conducting a business impact analysis (BIA)?

Question 1474

(0)

Which of the following is the FIRST requirement a data owner should consider before implementing a data retention policy?

Question 1475

(0)

Information Security Continuous Monitoring (1SCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decision

Question 1476

(0)

When designing a Cyber-Physical System (CPS), which of the following should be a security practitioner's first consideration?

Question 1477

(0)

Which of the following BEST describes the use of network architecture in reducing corporate risks associated with mobile devices?

Question 1478

(0)

Which of the following is an important design feature for the outer door o f a mantrap?

Question 1479

(0)

In setting expectations when reviewing the results of a security test, which of the following statements is MOST important to convey to reviewers?

Question 1480

(0)

What is the overall goal of software security testing?

Question 1471

What are the first two components of logical access control?

Confidentiality and authentication

Authentication and identification

Identification and confidentiality

Authentication and availability

Show Answer Comment (0)

Question 1472

What is the MAIN purpose of a security assessment plan?

Provide guidance on security requirements, to ensure the identified security risks are properly addressed based on the recommendation

Provide the objectives for the security and privacy control assessments and a detailed roadmap of how to conduct such assessments.

Provide technical information to executives to help them understand information security postures and secure funding.

Provide education to employees on security and privacy, to ensure their awareness on policies and procedures

Show Answer Comment (0)

Question 1473

What is the MAIN purpose of conducting a business impact analysis (BIA)?

To determine the critical resources required to recover from an incident within a specified time period

To determine the effect of mission-critical information system failures on core business processes

To determine the cost for restoration of damaged information system

To determine the controls required to return to business critical operations

Show Answer Comment (0)

Question 1474

Which of the following is the FIRST requirement a data owner should consider before implementing a data retention policy?

Training

Legal

Business

Storage

Show Answer Comment (0)

Information Security Continuous Monitoring (1SCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Which of the following is the FIRST step in developing an ISCM strategy and implementing an ISCM program?

Define a strategy based on risk tolerance that maintains clear visibility into assets, awareness of vulnerabilities, up-to-date threat information, and mission/business impacts.

Conduct a vulnerability assessment to discover current threats against the environment and incorporate them into the program.

Respond to findings with technical management, and operational mitigating activities or acceptance, transference/sharing, or avoidance/rejection.

Analyze the data collected and report findings, determining the appropriate response. It may be necessary to collect additional information to clarify or supplement existing monitoring data.

Show Answer Comment (0)