Which of the following is the process performed between organizations that have unique hardware or software that cannot be maintained at a hot or warm site?

Duplicate processing facilities

Mark works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a document to be used to help understand what impact a disruptive event would have on the business. The impact might be financial or operational. Which of the following are the objectives related to the above phase in whichMark is involved? Each correct answer represents a part of the solution. Choose three.

Resource requirements identification

Performing vulnerability assessment

Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that apply.

It performs vulnerability/threat analysis assessment.

It identifies and generates IA requirements.

It provides data needed to accurately assess IA readiness.

It performs vulnerability/threat analysis assessment.

It identifies and generates IA requirements.

It provides data needed to accurately assess IA readiness.

It provides for entry and storage of individual system data.

Which of the following is the best method to stop vulnerability attacks on a Web server?

Installing service packs and updates

Implementing the latest virus scanner

Installing service packs and updates

Which of the following types of activities can be audited for security? Each correct answer represents a complete solution. Choose three.

Data downloading from the Internet

Which of the following laws is the first to implement penalties for the creator of viruses, worms, and other types of malicious code that causes harm to the computer systems?

Digital Millennium Copyright Act

Which of the following statements about system hardening are true? Each correct answer represents a complete solution. Choose two.

It can be achieved by installing service packs and security updates on a regular basis.

It is used for securing an operating system.

It can be achieved by installing service packs and security updates on a regular basis.

It is used for securing the computer hardware.

It can be achieved by locking the computer room.

It is used for securing an operating system.

Which of the following processes is described in the statement below? "It is the process of implementing risk response plans, tracking identified risks, monitoring residual risk, identifying new risks, and evaluating risk process effectiveness throughout the project."

Perform Qualitative Risk Analysis

Perform Quantitative Risk Analysis

Walter is the project manager of a large construction project. He'll be working with several vendors on the project. Vendors will be providing materials and labor for several parts of the project. Some of the works in the project are very dangerous so Walter has implemented safety requirements for all of the vendors and his own project team. Stakeholders for the project have added new requirements, which have caused new risks in the project. A vendor has identified a new risk that could affect the project if it comes into fruition. Walter agrees with the vendor and has updated the risk register and created potential risk responses to mitigate the risk. What should Walter also update in this scenario considering the risk event?

Project contractual relationship with the vendor

You are the project manager of the HJK Project for your organization. You and the project team have created risk responses for many of the risk events in the project. Where should you document the proposed responses and the current status of all identified risks?

Stakeholder management strategy

Which of the following security controls will you use for the deployment phase of the SDLC to build secure software? Each correct answer represents a complete solution. Choose all that apply.

Vulnerability Assessment and Penetration Testing

Security Certification and Accreditation (C&A)

Vulnerability Assessment and Penetration Testing

Security Certification and Accreditation (C&A)

Change and Configuration Control

Which of the following types of evidence is considered as the best evidence?

A copy of the original document

Information gathered through the witness's senses

A contract cannot have provisions for which one of the following?

Penalties and fines for disclosure of intellectual rights

A deadline for the completion of the work

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program. What will be your answer?

It improves awareness of the need to protect system resources.

It improves the possibility for career advancement of the IT staff.

It improves the security of vendor relations.

It improves the performance of a company's intranet.

It improves awareness of the need to protect system resources.

What component of the change management system is responsible for evaluating, testing, and documenting changes created to the project scope?

Configuration Management System

Project Management Information System

Configuration Management System

ISC CISSP-ISSMP Practice Test 1 - Free Online Exam Prep & Questions

Which of the following fields of management focuses on establishing and maintaining consistency of a system's or product's performance and its functional and physical attributes with its requirements, design, and operational information throughout its life?

Configuration management

Risk management

Procurement management

Change management

Comment (0)

ISC CISSP-ISSMP Practice Test 1

Question

ISC CISSP-ISSMP Practice Tests

Practice Tests