Home / ISC / CISSP-ISSMP

ISC CISSP-ISSMP Practice Test - Questions Answers, Page 16

Question list

List of questions

Question 151

(0)

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Question 152

(0)

Which of the following statements is related with the second law of OPSEC?

Question 153

(0)

Which of the following elements of BCP process includes the areas of plan implementation, plan testing, and ongoing plan maintenance, and also involves defining and documenting the continuity strate

Question 154

(0)

SIMULATION Fill in the blank with an appropriate phrase.________ An is an intensive application of the OPSEC process to an existing operation or activity by a multidiscipline team of experts.

Question 155

(0)

Which of the following Acts enacted in United States allows the FBI to issue National Security Letters (NSLs) to Internet service providers (ISPs) ordering them to disclose records about their custo

Question 156

(0)

You work as a Product manager for Marioiss Inc. You have been tasked to start a project for securing the network of your company. You want to employ configuration management to efficiently manage th

Question 157

(0)

You company suspects an employee of sending unauthorized emails to competitors. These emails are alleged to contain confidential company dat a. Which of the following is the most important step for

Question 158

(0)

Which of the following are the levels of public or commercial data classification system? Each correct answer represents a complete solution. Choose all that apply.

Question 159

(0)

Which of the following is a formula, practice, process, design, instrument, pattern, or compilation of information which is not generally known, but by which a business can obtain an economic advant

Question 160

(0)

Which of the following backup sites takes the longest recovery time?

Question 151

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Safeguard

Single Loss Expectancy (SLE)

Exposure Factor (EF)

Annualized Rate of Occurrence (ARO)

Show Answer Comment (0)

Question 152

Which of the following statements is related with the second law of OPSEC?

If you are not protecting it (the critical and sensitive information), the adversary wins!

If you don't know what to protect, how do you know you are protecting it?

If you don't know about your security resources you could not protect your network.

If you don't know the threat, how do you know what to protect?

Show Answer Comment (0)

Which of the following elements of BCP process includes the areas of plan implementation, plan testing, and ongoing plan maintenance, and also involves defining and documenting the continuity strategy?

Business continuity plan development

Business impact assessment

Scope and plan initiation

Plan approval and implementation

Show Answer Comment (0)

Question 154

SIMULATION

Fill in the blank with an appropriate phrase.________ An is an intensive application of the OPSEC process to an existing operation or activity by a multidiscipline team of experts.

OPSEC assessment

Show Answer Comment (0)

Question 155

Which of the following Acts enacted in United States allows the FBI to issue National Security Letters (NSLs) to Internet service providers (ISPs) ordering them to disclose records about their customers?

Electronic Communications Privacy Act of 1986

Wiretap Act

Computer Fraud and Abuse Act

Economic Espionage Act of 1996

Show Answer Comment (0)

Question 156

You work as a Product manager for Marioiss Inc. You have been tasked to start a project for securing the network of your company. You want to employ configuration management to efficiently manage the procedures of the project. What will be the benefits of employing configuration management for completing this project? Each correct answer represents a complete solution. Choose all that apply.

It provides object, orient, decide and act strategy.

It provides a live documentation of the project.

It provides the risk analysis of project configurations.

It provides the versions for network devices.

Show Answer Comment (0)

Question 157

You company suspects an employee of sending unauthorized emails to competitors. These emails are alleged to contain confidential company dat a. Which of the following is the most important step for you to take in preserving the chain of custody?

Preserve the email server including all logs.

Seize the employee's PC.

Make copies of that employee's email.

Place spyware on the employee's PC to confirm these activities.

Show Answer Comment (0)

Question 158

Which of the following are the levels of public or commercial data classification system? Each correct answer represents a complete solution. Choose all that apply.

Secret

Sensitive

Unclassified

Private

Confidential

Public

Show Answer Comment (0)

Question 159

Which of the following is a formula, practice, process, design, instrument, pattern, or compilation of information which is not generally known, but by which a business can obtain an economic advantage over its competitors?

Utility model