Home / ISC / CISSP-ISSMP

ISC CISSP-ISSMP Practice Test - Questions Answers, Page 13

Question list

List of questions

Question 121

(0)

Which of the following architecturally related vulnerabilities is a hardware or software mechanism, which was installed to permit system maintenance and to bypass the system's security protections?

Question 122

(0)

You have created a team of HR Managers and Project Managers for Blue Well Inc. The team will concentrate on hiring some new employees for the company and improving the organization's overall securit

Question 123

(0)

Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management

Question 124

(0)

Which of the following persons is responsible for testing and verifying whether the security policy is properly implemented, and the derived security solutions are adequate or not?

Question 125

(0)

Which of the following are the process steps of OPSEC? Each correct answer represents a part of the solution. Choose all that apply.

Question 126

(0)

You work as a project manager for SoftTech Inc. A threat with a dollar value of $150,000 is expected to happen in your project and the frequency of threat occurrence per year is 0.001. What will be

Question 127

(0)

Which of the following are the responsibilities of the owner with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

Question 128

(0)

You work as the Network Administrator for a defense contractor. Your company works with sensitive materials and all IT personnel have at least a secret level clearance. You are still concerned that

Question 129

(0)

Which of the following statements is true about auditing?

Question 130

(0)

SIMULATION Fill in the blank with an appropriate phrase. _______is a branch of forensic science pertaining to legal evidence found in computers and digital storage media.

Question 121

Which of the following architecturally related vulnerabilities is a hardware or software mechanism, which was installed to permit system maintenance and to bypass the system's security protections?

Maintenance hook

Lack of parameter checking

Time of Check to Time of Use (TOC/TOU) attack

Covert channel

Show Answer Comment (0)

You have created a team of HR Managers and Project Managers for Blue Well Inc. The team will concentrate on hiring some new employees for the company and improving the organization's overall security by turning employees among numerous job positions. Which of the following steps will you perform to accomplish the task?

Job rotation

Job responsibility

Screening candidates

Separation of duties

Show Answer Comment (0)

Question 123

Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like for you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart?

Quantitative analysis

Contingency reserve

Risk response

Risk response plan

Show Answer Comment (0)

Question 124

Which of the following persons is responsible for testing and verifying whether the security policy is properly implemented, and the derived security solutions are adequate or not?

Data custodian

Auditor

User

Data owner

Show Answer Comment (0)

Question 125

Which of the following are the process steps of OPSEC? Each correct answer represents a part of the solution. Choose all that apply.

Analysis of Vulnerabilities

Display of associated vulnerability components

Assessment of Risk

Identification of Critical Information

Show Answer Comment (0)

Question 126

You work as a project manager for SoftTech Inc. A threat with a dollar value of $150,000 is expected to happen in your project and the frequency of threat occurrence per year is 0.001. What will be the annualized loss expectancy in your project?

$180.25

$150

$100

$120

Show Answer Comment (0)

Question 127

Which of the following are the responsibilities of the owner with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

Determining what level of classification the information requires.

Delegating the responsibility of the data protection duties to a custodian.

Reviewing the classification assignments at regular time intervals and making changes as the business needs change.

Running regular backups and routinely testing the validity of the backup data.

Show Answer Comment (0)

Question 128

You work as the Network Administrator for a defense contractor. Your company works with sensitive materials and all IT personnel have at least a secret level clearance. You are still concerned that one individual could perhaps compromise the network (intentionally or unintentionally) by setting up improper or unauthorized remote access. What is the best way to avoid this problem?

Implement separation of duties.

Implement RBAC.

Implement three way authentication.

Implement least privileges.

Show Answer Comment (0)

Question 129

Which of the following statements is true about auditing?

It is used to protect the network against virus attacks.

It is used to track user accounts for file and object access, logon attempts, etc.

It is used to secure the network or the computers on the network.

It is used to prevent unauthorized access to network resources.

Show Answer Comment (0)

Question 130

SIMULATION

Fill in the blank with an appropriate phrase. _______is a branch of forensic science pertaining to legal evidence found in computers and digital storage media.

Computer forensics

Show Answer Comment (0)

Total 218 questions