Which of the following steps is the initial step in developing an information security strategy?

Analyze the current business strategy.

Perform a technical vulnerabilities assessment.

Assess the current levels of security awareness.

Perform a business impact analysis.

Analyze the current business strategy.

Which of the following statements about the integrity concept of information security management are true? Each correct answer represents a complete solution.Choose three.

It ensures that unauthorized modifications are not made to data by authorized personnel or processes.

It ensures that modifications are not made to data by unauthorized personnel or processes.

It ensures that internal information is consistent among all subentities and also consistent with the real-world, external situation.

It ensures that unauthorized modifications are not made to data by authorized personnel or processes.

It determines the actions and behaviors of a single individual within a system

It ensures that modifications are not made to data by unauthorized personnel or processes.

It ensures that internal information is consistent among all subentities and also consistent with the real-world, external situation.

What is a stakeholder analysis chart?

It is a matrix that documents stakeholders' threats, perceived threats, and communication needs.

It is a matrix that identifies all of the stakeholders and to whom they must report to.

It is a matrix that documents the stakeholders' requirements, when the requirements were created, and when the fulfillment of the requirements took place.

It is a matrix that identifies who must communicate with whom.

Which of the following roles is responsible for review and risk analysis of all contracts on a regular basis?

The IT Service Continuity Manager

Which of the following laws or acts, formed in Australia, enforces prohibition against cyber stalking?

Malicious Communications Act (1998)

Stalking by Electronic Communications Act (2001)

Which of the following statements is related with the first law of OPSEC?

If you don't know the threat, how do you know what to protect?

If you are not protecting it (the critical and sensitive information), the adversary wins!

If you don't know what to protect, how do you know you are protecting it?

If you don't know about your security resources you could not protect your network.

If you don't know the threat, how do you know what to protect?

Which of the following is the correct order of digital investigations Standard Operating Procedure (SOP)?

Request for service, initial analysis, data collection, data analysis, data reporting

Initial analysis, request for service, data collection, data reporting, data analysis

Initial analysis, request for service, data collection, data analysis, data reporting

Request for service, initial analysis, data collection, data analysis, data reporting

Request for service, initial analysis, data collection, data reporting, data analysis

You are documenting your organization's change control procedures for project management. What portion of the change control process oversees features and functions of the product scope?

Product scope management is outside the concerns of the project.

Which of the following are the major tasks of risk management? Each correct answer represents a complete solution. Choose two.

Assuring the integrity of organizational data

Which of the following statements best describes the consequences of the disaster recovery plan test?

If no deficiencies were found during the test, then the test was probably flawed.

The plan should not be changed no matter what the results of the test would be.

The results of the test should be kept secret.

If no deficiencies were found during the test, then the plan is probably perfect.

Which of the following statements reflect the 'Code of Ethics Canons' in the '(ISC)2 Code of Ethics'? Each correct answer represents a complete solution.Choose all that apply.

Provide diligent and competent service to principals.

Protect society, the commonwealth, and the infrastructure.

Act honorably, honestly, justly, responsibly, and legally.

Provide diligent and competent service to principals.

Protect society, the commonwealth, and the infrastructure.

Give guidance for resolving good versus good and bad versus bad dilemmas.

Act honorably, honestly, justly, responsibly, and legally.

Which of the following issues are addressed by the change control phase in the maintenance phase of the life cycle models? Each correct answer represents a complete solution. Choose all that apply.

Recreating and analyzing the problem

Developing the changes and corresponding tests

Recreating and analyzing the problem

Developing the changes and corresponding tests

Establishing the priorities of requests

Which of the following statements about Due Care policy is true?

It identifies the level of confidentiality of information.

It is a method used to authenticate users on a network.

It is a method for securing database servers.

It identifies the level of confidentiality of information.

It provides information about new viruses.

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?

Configuration Verification and Auditing

Configuration Status Accounting

ISC CISSP-ISSMP Practice Test 2 - Free Online Exam Prep & Questions

Electronic communication technology refers to technology devices, such as computers and cell phones, used to facilitate communication. Which of the following is/are a type of electronic communication? Each correct answer represents a complete solution. Choose all that apply.

A.

Internet telephony

B.

Instant messaging

C.

Electronic mail

D.

Post-it note

E.

Blogs

F.

Internet teleconferencing

ISC CISSP-ISSMP Practice Test 2

Question

ISC CISSP-ISSMP Practice Tests

Practice Tests