The incident response team has turned the evidence over to the forensic team. Now, it is the time to begin looking for the ways to improve the incident response process for next time. What are the typical areas for improvement? Each correct answer represents a complete solution. Choose all that apply.

Information dissemination policy

Electronic monitoring statement

Additional personnel security controls

Information dissemination policy

Electronic monitoring statement

Additional personnel security controls

Which of the following is a variant with regard to Configuration Management?

A CI that has the same essential functionality as another CI but a bit different in some small manner.

A CI that has the same name as another CI but shares no relationship.

A CI that particularly refers to a hardware specification.

A CI that has the same essential functionality as another CI but a bit different in some small manner.

A CI that particularly refers to a software version.

You work as a Forensic Investigator. Which of the following rules will you follow while working on a case? Each correct answer represents a part of the solution.Choose all that apply.

Prepare a chain of custody and handle the evidence carefully.

Examine original evidence and never rely on the duplicate evidence.

Never exceed the knowledge base of the forensic investigation.

Follow the rules of evidence and never temper with the evidence.

Prepare a chain of custody and handle the evidence carefully.

Examine original evidence and never rely on the duplicate evidence.

Never exceed the knowledge base of the forensic investigation.

Follow the rules of evidence and never temper with the evidence.

Which of the following are the responsibilities of a custodian with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

Running regular backups and routinely testing the validity of the backup data

Controlling access, adding and removing privileges for individual users

Performing data restoration from the backups when necessary

Determining what level of classification the information requires

Running regular backups and routinely testing the validity of the backup data

Controlling access, adding and removing privileges for individual users

Performing data restoration from the backups when necessary

Which of the following statements about Hypertext Transfer Protocol Secure (HTTPS) are true? Each correct answer represents a complete solution. Choose two.

It is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure site.

It uses TCP port 443 as the default port.

It uses TCP port 80 as the default port.

It is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure site.

It uses TCP port 443 as the default port.

It is a protocol used to provide security for a database server in an internal network.

Which of the following statements are true about a hot site? Each correct answer represents a complete solution. Choose all that apply.

It can be used within an hour for data recovery.

It is a duplicate of the original site of the organization, with full computer systems as well as near-complete backups of user data.

It can be used within an hour for data recovery.

It is cheaper than a cold site but more expensive than a worm site.

It is the most inexpensive backup site.

It is a duplicate of the original site of the organization, with full computer systems as well as near-complete backups of user data.

NIST Special Publication 800-50 is a security awareness program. It is designed for those people who are currently working in the information technology field and want information on security policies. Which of the following are some of its critical steps? Each correct answer represents a complete solution. Choose two.

Awareness and Training Material Development

Awareness and Training Program Design

Awareness and Training Material Effectiveness

Awareness and Training Material Development

Awareness and Training Material Implementation

Awareness and Training Program Design

You are the Network Administrator for a college. You watch a large number of people (some not even students) going in and out of areas with campus computers (libraries, computer labs, etc.). You have had a problem with laptops being stolen. What is the most cost effective method to prevent this?

Video surveillance on all areas with computers.

Smart card access to all areas with computers.

In which of the following contract types, the seller is reimbursed for all allowable costs for performing the contract work and receives a fixed fee payment which is calculated as a percentage of the initial estimated project costs?

Fixed Price Incentive Fee Contracts

Cost Plus Incentive Fee Contracts

Which of the following types of cyber stalking damage the reputation of their victim and turn other people against them by setting up their own Websites, blogs or user pages for this purpose?

Encouraging others to harass the victim

Attempts to gather information about the victim

You work as a security manager for SoftTech Inc. You along with your team are doing the disaster recovery for your project. Which of the following steps are performed by you for secure recovery based on the extent of the disaster and the organization's recovery ability? Each correct answer represents a part of the solution. Choose three.

Recover to an alternate site for critical functions

Restore full system after a catastrophic loss

Recover at the primary operating site

Recover to an alternate site for critical functions

Restore full system at an alternate operating site

Restore full system after a catastrophic loss

Recover at the primary operating site

Management has asked you to perform a risk audit and report back on the results. Bonny, a project team member asks you what a risk audit is. What do you tellBonny?

A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management process.

A risk audit is a review of all the risks that have yet to occur and what their probability of happening are.

A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management process.

A risk audit is a review of all the risk probability and impact for the risks, which are still present in the project but which have not yet occurred.

A risk audit is an audit of all the risks that have occurred in the project and what their true impact on cost and time has been.

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. Which of the following ideas will you consider the best when conducting a security awareness campaign?

Provide customized messages for different groups.

Target system administrators and the help desk.

Provide technical details on exploits.

Provide customized messages for different groups.

Target senior managers and business process owners.

You are the Network Administrator for a software company. Due to the nature of your company's business, you have a significant number of highly computer savvy users. However, you have still decided to limit each user access to only those resources required for their job, rather than give wider access to the technical users (such as tech support and software engineering personnel). What is this an example of?

The principle of least privileges.

The principle of maximum control.

The principle of least privileges.

Which of the following are examples of administrative controls that involve all levels of employees within an organization and determine which users have access to what resources and information? Each correct answer represents a complete solution. Choose three.

Employee registration and accounting

Disaster preparedness and recovery plans

Employee registration and accounting

Disaster preparedness and recovery plans

Which of the following governance bodies provides management, operational and technical controls to satisfy security requirements?

Information Security Steering Committee

Chief Information Security Officer

Which of the following sites are similar to the hot site facilities, with the exception that they are completely dedicated, self-developed recovery facilities?

Duplicate processing facilities

ISC CISSP-ISSMP Practice Test 5 - Free Online Exam Prep & Questions

John works as a security manager for Soft Tech Inc. He is working with his team on the disaster recovery management plan. One of his team members has a doubt related to the most cost effective DRP testing plan. According to you, which of the following disaster recovery testing plans is the most cost-effective and efficient way to identify areas of overlap in the plan before conducting more demanding training exercises?

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP-ISSMP Practice Test 5

Question

ISC CISSP-ISSMP Practice Tests

Practice Tests