Home / ISC / CISSP

ISC CISSP Practice Test - Questions Answers, Page 61

Question list

List of questions

Question 601

(0)

What is the MAIN purpose of a change management policy?

Question 602

(0)

Who is responsible for the protection of information when it is shared with or provided to other organizations?

Question 603

(0)

Which of the following is the MOST challenging issue in apprehending cyber criminals?

Question 604

(0)

Which of the following are important criteria when designing procedures and acceptance criteria for acquired software?

Question 605

(0)

Which of the following steps should be performed FIRST when purchasing Commercial Off-The-Shelf (COTS) software?

Question 606

(0)

An organization has outsourced its financial transaction processing to a Cloud Service Provider (CSP) who will provide them with Software as a Service (SaaS). If there was a data breach who is respo

Question 607

(0)

What is the PRIMARY role of a scrum master in agile development?

Question 608

(0)

What capability would typically be included in a commercially available software package designed for access control?

Question 609

(0)

An organization plan on purchasing a custom software product developed by a small vendor to support its business model. Which unique consideration should be made part of the contractual agreement po

Question 610

(0)

When developing solutions for mobile devices, in which phase of the Software Development Life Cycle (SDLC) should technical limitations related to devices be specified?

Question 601

What is the MAIN purpose of a change management policy?

To assure management that changes to the Information Technology (IT) infrastructure are necessary

To identify the changes that may be made to the Information Technology (IT) infrastructure

To verify that changes to the Information Technology (IT) infrastructure are approved

To determine the necessary for implementing modifications to the Information Technology (IT) infrastructure

Show Answer Comment (0)

Question 602

Who is responsible for the protection of information when it is shared with or provided to other organizations?

Systems owner

Authorizing Official (AO)

Information owner

Security officer

Show Answer Comment (0)

Question 603

Which of the following is the MOST challenging issue in apprehending cyber criminals?

They often use sophisticated method to commit a crime.

It is often hard to collect and maintain integrity of digital evidence.

The crime is often committed from a different jurisdiction.

There is often no physical evidence involved.

Show Answer Comment (0)

Question 604

Which of the following are important criteria when designing procedures and acceptance criteria for acquired software?

Code quality, security, and origin

Architecture, hardware, and firmware

Data quality, provenance, and scaling

Distributed, agile, and bench testing

Show Answer Comment (0)

Question 605

Which of the following steps should be performed FIRST when purchasing Commercial Off-The-Shelf (COTS) software?

undergo a security assessment as part of authorization process

establish a risk management strategy

harden the hosting server, and perform hosting and application vulnerability scans

establish policies and procedures on system and services acquisition

Show Answer Comment (0)

An organization has outsourced its financial transaction processing to a Cloud Service Provider (CSP) who will provide them with Software as a Service (SaaS). If there was a data breach who is responsible for monetary losses?

The Data Protection Authority (DPA)

The Cloud Service Provider (CSP)

The application developers

The data owner

Show Answer Comment (0)

Question 607

What is the PRIMARY role of a scrum master in agile development?

To choose the primary development language

To choose the integrated development environment

To match the software requirements to the delivery plan

To project manage the software delivery

Show Answer Comment (0)

Question 608

What capability would typically be included in a commercially available software package designed for access control?

Password encryption

File encryption

Source library control

File authentication

Show Answer Comment (0)

Question 609

An organization plan on purchasing a custom software product developed by a small vendor to support its business model. Which unique consideration should be made part of the contractual agreement potential long-term risks associated with creating this dependency?

A source code escrow clause

Right to request an independent review of the software source code

Due diligence form requesting statements of compliance with security requirements

Access to the technical documentation

Show Answer Comment (0)

Question 610

When developing solutions for mobile devices, in which phase of the Software Development Life Cycle (SDLC) should technical limitations related to devices be specified?

Implementation

Initiation

Review

Development

Show Answer Comment (0)

Total 1.482 questions