Which of the following statements about the availability concept of Information security management is true?

It ensures reliable and timely access to resources.

It determines actions and behaviors of a single individual within a system.

It ensures reliable and timely access to resources.

It ensures that unauthorized modifications are not made to data by authorized personnel or processes.

It ensures that modifications are not made to data by unauthorized personnel or processes.

Which of the following statements best explains how encryption works on the Internet?

Encryption encodes information using specific algorithms with a string of numbers known as a key.

Encryption validates a username and password before sending information to the Web server.

Encryption allows authorized users to access Web sites that offer online shopping.

Encryption helps in transaction processing by e-commerce servers on the Internet.

Which of the following statutes is enacted in the U.S., which prohibits creditors from collecting data from applicants, such as national origin, caste, religion etc?

The Equal Credit Opportunity Act (ECOA)

The Fair Credit Reporting Act (FCRA)

The Electronic Communications Privacy Act

The Equal Credit Opportunity Act (ECOA)

Rick is the project manager for TTM project. He is in the process of procuring services from vendors. He makes a contract with a vendor in which he precisely specify the services to be procured, and any changes to the procurement specification will increase the costs to the buyer. Which type of contract is this?

Fixed Price with Economic Price Adjustment

SIMULATIONFill in the blank with the appropriate phrase. ____________ is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time.

Configuration status accounting

Eric is the project manager of the NQQ Project and has hired the ZAS Corporation to complete part of the project work for Eric's organization. Due to a change request the ZAS Corporation is no longer needed on the project even though they have completed nearly all of the project work. Is Eric's organization liable to pay the ZAS Corporation for the work they have completed so far on the project?

It depends on what the termination clause of the contract stipulates.

Yes, the ZAS Corporation did not choose to terminate the contract work.

It depends on what the outcome of a lawsuit will determine.

It depends on what the termination clause of the contract stipulates.

No, the ZAS Corporation did not complete all of the work.

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

Assessing the impact of potential threats

Finding an economic balance between the impact of the risk and the cost of the countermeasure

Assessing the impact of potential threats

Finding an economic balance between the impact of the risk and the cost of the countermeasure

Della works as a security manager for SoftTech Inc. She is training some of the newly recruited personnel in the field of security management. She is giving a tutorial on DRP. She explains that the major goal of a disaster recovery plan is to provide an organized way to make decisions if a disruptive event occurs and asks for the other objectives of the DRP. If you are among some of the newly recruited personnel in SoftTech Inc, what will be your answer for her question?Each correct answer represents a part of the solution. Choose three.

Protect an organization from major computer services failure.

Minimize the risk to the organization from delays in providing services.

Guarantee the reliability of standby systems through testing and simulation.

Protect an organization from major computer services failure.

Minimize the risk to the organization from delays in providing services.

Guarantee the reliability of standby systems through testing and simulation.

Maximize the decision-making required by personnel during a disaster.

You are the project manager of the NGQQ Project for your company. To help you communicate project status to your stakeholders, you are going to create a stakeholder register. All of the following information should be included in the stakeholder register except for which one?

Stakeholder management strategy

Identification information for each stakeholder

Assessment information of the stakeholders' major requirements, expectations, and potential influence

Stakeholder classification of their role in the project

Stakeholder management strategy

Which of the following laws enacted in United States makes it illegal for an Internet Service Provider (ISP) to allow child pornography to exist on Web sites?

Child Pornography Prevention Act (CPPA)

Prosecutorial Remedies and Tools Against the Exploitation of Children Today Act (PROTECT Act)

Which of the following representatives of incident response team takes forensic backups of the systems that are the focus of the incident?

Information security representative

Which of the following statements are true about security risks? Each correct answer represents a complete solution. Choose three.

They can be analyzed and measured by the risk analysis process.

They can be mitigated by reviewing and taking responsible actions based on possible risks.

They are considered an indicator of threats coupled with vulnerability.

They can be analyzed and measured by the risk analysis process.

They can be removed completely by taking proper actions.

They can be mitigated by reviewing and taking responsible actions based on possible risks.

They are considered an indicator of threats coupled with vulnerability.

Which of the following methods for identifying appropriate BIA interviewees' includes examining the organizational chart of the enterprise to understand the functional positions?

Executive management interviews

Which of the following BCP teams provides clerical support to the other teams and serves as a message center for the user-recovery site?

Data preparation and records team

ISC CISSP-ISSMP Practice Test 3 - Free Online Exam Prep & Questions

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP-ISSMP Practice Test 3

Question

ISC CISSP-ISSMP Practice Tests

Practice Tests