Home / ISC / HCISPP

ISC HCISPP Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

Which of the following types of business continuity tests includes assessment of resilience to internal and external risks without endangering live operations?

Question 52

(0)

A continuous information security monitoring program can BEST reduce risk through which of the following?

Question 53

(0)

Which of the following is the PRIMARY risk with using open source software in a commercial software construction?

Question 54

(0)

Which one of these risk factors would be the LEAST important consideration in choosing a building site for a new computer facility?

Question 55

(0)

Multi-threaded applications are more at risk than single-threaded applications to

Question 56

(0)

Which of the following is a potential risk when a program runs in privileged mode?

Question 57

(0)

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

Question 58

(0)

Which of the following disaster recovery test plans will be MOST effective while providing minimal risk?

Question 59

(0)

Which of the following BEST describes the purpose of performing security certification?

Question 60

(0)

The BEST method to mitigate the risk of a dictionary attack on a system is to

Related questions

Which of the following statements is NOT correct?

DRAG DROP During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant. What is the best approach for the CISO? Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location.

If you see other staff violating privacy policies you should?

The First Blue Cross plan was given to teachers at Baylor University allowing them 21 days of hospital care at six dollars a year.

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

You receive a call from staff at a local hospital stating that they need information regarding a former client of yours who is scheduled for surgery. They fax you a release of information form which only authorizes the release of medications but the person on the phone is asking for dates of treatment and diagnoses. How would you respond?

You always abide by the HIPAA privacy rule.

The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

Question 51

Which of the following types of business continuity tests includes assessment of resilience to internal and external risks without endangering live operations?

Walkthrough

Simulation

Parallel

White box

Show Answer Comment (0)

Question 52

A continuous information security monitoring program can BEST reduce risk through which of the following?

Collecting security events and correlating them to identify anomalies

Facilitating system-wide visibility into the activities of critical user accounts

Encompassing people, process, and technology

Logging both scheduled and unscheduled system changes

Show Answer Comment (0)

Question 53

Which of the following is the PRIMARY risk with using open source software in a commercial software construction?

Lack of software documentation

License agreements requiring release of modified code

Expiration of the license agreement

Costs associated with support of the software

Show Answer Comment (0)

Question 54

Which one of these risk factors would be the LEAST important consideration in choosing a building site for a new computer facility?

Vulnerability to crime

Adjacent buildings and businesses

Proximity to an airline flight path

Vulnerability to natural disasters

Show Answer Comment (0)

Question 55

Multi-threaded applications are more at risk than single-threaded applications to

race conditions.

virus infection.

packet sniffing.

database injection.

Show Answer Comment (0)

Question 56

Which of the following is a potential risk when a program runs in privileged mode?

It may serve to create unnecessary code complexity

It may not enforce job separation duties

It may create unnecessary application hardening

It may allow malicious code to be inserted

Show Answer Comment (0)

Question 57

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

The inherent risk is greater than the residual risk.

The Annualized Loss Expectancy (ALE) approaches zero.

The expected loss from the risk exceeds mitigation costs.

The infrastructure budget can easily cover the upgrade costs.

Show Answer Comment (0)