ISC HCISPP Practice Test - Questions Answers, Page 7
List of questions
Question 61

In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?
Question 62

Which of the following is the BEST reason for the use of security metrics?
Question 63

An international medical organization with headquarters in the United States (US) and branches in France wants to test a drug in both countries. What is the organization allowed to do with the test subject's data?
Question 64

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?
Question 65

Which of the following methods MOST efficiently manages user accounts when using a third-party cloud-based application and directory solution?
Question 66

An organization is outsourcing its payroll system and is requesting to conduct a full audit on the thirdparty information technology (IT) systems. During the due diligence process, the third party provides previous audit report on its IT system.
Which of the following MUST be considered by the organization in order for the audit reports to be acceptable?
Question 67

Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider's customers?
Reference:
https://www.aicpa.org/content/dam/aicpa/interestareas/frc/assuranceadvisoryservices/downloadabledocuments/trust-services-criteria.pdf
Explanation:
Question 68

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?
Question 69

The primary objectives of a healthcare system include all of the following except:
Question 70

The U.S. healthcare system can best be described as:
Question