Home

Home / ISC / CISSP-ISSMP

Question list

List of questions

Question 1

(0)

Which of the following fields of management focuses on establishing and maintaining consistency of a system's or product's performance and its functional and physical attributes with its requirement

Question 2

(0)

Which of the following are the ways of sending secure e-mail messages over the Internet? Each correct answer represents a complete solution. Choose two.

Question 3

(0)

You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access your remote deskto

Question 4

(0)

Which of the following is the process performed between organizations that have unique hardware or software that cannot be maintained at a hot or warm site?

Question 5

(0)

Which of the following involves changing data prior to or during input to a computer in an effort to commit fraud?

Question 6

(0)

Which of the following penetration testing phases involves reconnaissance or data gathering?

Question 7

(0)

Mark works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a document to be used to help understand what impact a disruptive event would have on the business. The i

Question 8

(0)

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affai

Question 9

(0)

Which of the following protocols is used with a tunneling protocol to provide security?

Question 10

(0)

Which of the following subphases are defined in the maintenance phase of the life cycle models?

Open VPLUS File

Convert VPLUS to PDF

Related questions

How many change control systems are there in project management?

Which of the following statements is related with the second law of OPSEC?

Your project team has identified a project risk that must be responded to. The risk has been recorded in the risk register and the project team has been discussing potential risk responses for the risk event. The event is not likely to happen for several months but the probability of the event is high. Which one of the following is a valid response to the identified risk event?

Which of the following statutes is enacted in the U.S., which prohibits creditors from collecting data from applicants, such as national origin, caste, religion etc?

You work as the project manager for Bluewell Inc. You are working on NGQQ Project for your company. You have completed the risk analysis processes for the risk events. You and the project team have created risk responses for most of the identified project risks. Which of the following risk response planning techniques will you use to shift the impact of a threat to a third party, together with the responses?

Which of the following liabilities is a third-party liability in which an individual may be responsible for an action by another party?

In which of the following contract types, the seller is reimbursed for all allowable costs for performing the contract work and receives a fixed fee payment which is calculated as a percentage of the initial estimated project costs?

How can you calculate the Annualized Loss Expectancy (ALE) that may occur due to a threat?

Which of the following architecturally related vulnerabilities is a hardware or software mechanism, which was installed to permit system maintenance and to bypass the system's security protections?

SIMULATION Fill in the blank with the appropriate phrase. ____________ is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time.

Question 152 - CISSP-ISSMP discussion

Report

Which of the following statements is related with the second law of OPSEC?

A.

If you are not protecting it (the critical and sensitive information), the adversary wins!

B.

If you don't know what to protect, how do you know you are protecting it?

C.

If you don't know about your security resources you could not protect your network.

D.

If you don't know the threat, how do you know what to protect?

Show Answer

asked 18/09/2024

MichaÅ‚ Wojciechowski

30 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first