Home / ISC / HCISPP

ISC HCISPP Practice Test - Questions Answers, Page 7

Question list

List of questions

Question 61

(0)

In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

Question 62

(0)

Which of the following is the BEST reason for the use of security metrics?

Question 63

(0)

An international medical organization with headquarters in the United States (US) and branches in France wants to test a drug in both countries. What is the organization allowed to do with the test

Question 64

(0)

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

Question 65

(0)

Which of the following methods MOST efficiently manages user accounts when using a third-party cloud-based application and directory solution?

Question 66

(0)

An organization is outsourcing its payroll system and is requesting to conduct a full audit on the thirdparty information technology (IT) systems. During the due diligence process, the third party p

Question 67

(0)

Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider's customers?

Question 68

(0)

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

Question 69

(0)

The primary objectives of a healthcare system include all of the following except:

Question 70

(0)

The U.S. healthcare system can best be described as:

Related questions

Which of the following statements is NOT correct?

DRAG DROP During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant. What is the best approach for the CISO? Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location.

If you see other staff violating privacy policies you should?

The First Blue Cross plan was given to teachers at Baylor University allowing them 21 days of hospital care at six dollars a year.

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

You receive a call from staff at a local hospital stating that they need information regarding a former client of yours who is scheduled for surgery. They fax you a release of information form which only authorizes the release of medications but the person on the phone is asking for dates of treatment and diagnoses. How would you respond?

You always abide by the HIPAA privacy rule.

The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

Question 61

In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

Reduced risk to internal systems.

Prepare the server for potential attacks.

Mitigate the risk associated with the exposed server.

Bypass the need for a firewall.

Show Answer Comment (0)

Question 62

Which of the following is the BEST reason for the use of security metrics?

They ensure that the organization meets its security objectives.

They provide an appropriate framework for Information Technology (IT) governance.

They speed up the process of quantitative risk assessment.

They quantify the effectiveness of security processes.

Show Answer Comment (0)

An international medical organization with headquarters in the United States (US) and branches in France wants to test a drug in both countries. What is the organization allowed to do with the test subject's data?

Aggregate it into one database in the US

Process it in the US, but store the information in France

Share it with a third party

Anonymize it and process it in the US

Show Answer Comment (0)

Question 64

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

Attribute assertions as agencies can request a larger set of attributes to fulfill service delivery

Data decrease related to storing personal information

Reduction in operational costs to the agency

Enable business objectives so departments can focus on mission rather than the business of identity management

Show Answer Comment (0)

Question 65

Which of the following methods MOST efficiently manages user accounts when using a third-party cloud-based application and directory solution?

Cloud directory

Directory synchronization

Assurance framework

Lightweight Directory Access Protocol (LDAP)

Show Answer Comment (0)

Question 66

An organization is outsourcing its payroll system and is requesting to conduct a full audit on the thirdparty information technology (IT) systems. During the due diligence process, the third party provides previous audit report on its IT system.

Which of the following MUST be considered by the organization in order for the audit reports to be acceptable?

The audit assessment has been conducted by an independent assessor.

The audit reports have been signed by the third-party senior management.

The audit reports have been issued in the last six months.

The audit assessment has been conducted by an international audit firm.

Show Answer Comment (0)

Question 67

Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider's customers?

Security

Privacy

Access

Availability

Show Answer Comment (0)

Question 68

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

The inherent risk is greater than the residual risk.

The Annualized Loss Expectancy (ALE) approaches zero.

The expected loss from the risk exceeds mitigation costs.

The infrastructure budget can easily cover the upgrade costs.

Show Answer Comment (0)