Home / ISC / HCISPP

ISC HCISPP Practice Test - Questions Answers, Page 5

Question list

List of questions

Question 41

(0)

All of the following items should be included in a Business Impact Analysis (BIA) Question:naire EXCEPT Question:s that

Question 42

(0)

Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

Question 43

(0)

Which of the following represents the GREATEST risk to data confidentiality?

Question 44

(0)

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Question 45

(0)

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures sho

Question 46

(0)

When assessing an organization's security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002, when can management responsibilities

Question 47

(0)

Which of the following types of technologies would be the MOST cost-effective method to provide a reactive control for protecting personnel in public areas?

Question 48

(0)

An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?

Question 49

(0)

Intellectual property rights are PRIMARY concerned with which of the following?

Question 50

(0)

Which of the following is a PRIMARY benefit of using a formalized security testing report format and structure?

Related questions

Which of the following statements is NOT correct?

DRAG DROP During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant. What is the best approach for the CISO? Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location.

If you see other staff violating privacy policies you should?

The First Blue Cross plan was given to teachers at Baylor University allowing them 21 days of hospital care at six dollars a year.

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

You receive a call from staff at a local hospital stating that they need information regarding a former client of yours who is scheduled for surgery. They fax you a release of information form which only authorizes the release of medications but the person on the phone is asking for dates of treatment and diagnoses. How would you respond?

The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

You always abide by the HIPAA privacy rule.

Question 41

All of the following items should be included in a Business Impact Analysis (BIA) Question:naire EXCEPT Question:s that

determine the risk of a business interruption occurring

determine the technological dependence of the business processes

Identify the operational impacts of a business interruption

Identify the financial impacts of a business interruption

Show Answer Comment (0)

Question 42

Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

Examine the device for physical tampering

Implement more stringent baseline configurations

Purge or re-image the hard disk drive

Change access codes

Show Answer Comment (0)

Question 43

Which of the following represents the GREATEST risk to data confidentiality?

Network redundancies are not implemented

Security awareness training is not completed

Backup tapes are generated unencrypted

Users have administrative privileges

Show Answer Comment (0)

Question 44

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Ensure the fire prevention and detection systems are sufficient to protect personnel

Review the architectural plans to determine how many emergency exits are present

Conduct a gap analysis of a new facilities against existing security requirements

Revise the Disaster Recovery and Business Continuity (DR/BC) plan

Show Answer Comment (0)

Question 45

Application

Storage

Power

Network

Show Answer Comment (0)

When assessing an organization's security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002, when can management responsibilities be defined?

Only when assets are clearly defined

Only when standards are defined

Only when controls are put in place

Only procedures are defined

Show Answer Comment (0)

Question 47

Which of the following types of technologies would be the MOST cost-effective method to provide a reactive control for protecting personnel in public areas?

Install mantraps at the building entrances

Enclose the personnel entry area with polycarbonate plastic

Supply a duress alarm for personnel exposed to the public

Hire a guard to protect the public area

Show Answer Comment (0)