ISC CISSP-ISSMP Online Practice Questions and Exam Preparation

ISC CISSP-ISSMP Online Questions & Answers

• Question 1:

  What course of action can be taken by a party if the current negotiations fail and an agreement cannot be reached?

  A. ZOPA
  B. PON
  C. Bias
  D. BATNA
  D. BATNA

• Question 2:

  In which of the following phases of the SDLC does the software and other components of the system faithfully incorporate the design specifications and provide proper documentation and training?

  A. Programming andtraining
  B. Evaluation and acceptance
  C. Initiation
  D. Design
  A. Programming andtraining

• Question 3:

  Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

  A. Direct
  B. Circumstantial
  C. Incontrovertible
  D. Corroborating
  B. Circumstantial

• Question 4:

  Shoulder surfing is a type of in-person attack in which the attacker gathers information about the premises of an organization. This attack is often performed by looking surreptitiously at the keyboard of an employee's computer while he is typing in his password at any access point such as a terminal/Web site.

  Which of the following is violated in a shoulder surfing attack?

  A. Availability
  B. Confidentiality
  C. Integrity
  D. Authenticity
  B. Confidentiality

• Question 5:

  Which of the following policies helps reduce the potential damage from the actions of one person?

  A. CSA
  B. Risk assessment
  C. Separation of duties
  D. Internal audit
  C. Separation of duties

• Question 6:

  Which of the following security issues does the Bell-La Padula model focus on?

  A. Authentication
  B. Confidentiality
  C. Integrity
  D. Authorization
  B. Confidentiality

• Question 7:

  Which of the following statements is related with the first law of OPSEC?

  A. If you are not protecting it (the critical and sensitive information), the adversary wins!
  B. If you don't know what to protect, how do you know you are protecting it?
  C. If you don't know about your security resources you could not protect your network.
  D. If you don't know the threat, how do you know what toprotect?
  D. If you don't know the threat, how do you know what toprotect?

• Question 8:

  Rick is the project manager for TTM project. He is in the process of procuring services from vendors. He makes a contract with a vendor in which he precisely specify the services to be procured, and any changes to the procurement specification will increase the costs to the buyer.

  Which type of contract is this?

  A. Firm Fixed Price
  B. Fixed Price Incentive Fee
  C. Cost Plus Fixed Fee Contract
  D. Fixed Price with Economic Price Adjustment
  A. Firm Fixed Price

• Question 9:

  Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?

  A. Configuration Verification and Auditing
  B. Configuration Item Costing
  C. Configuration Identification
  D. Configuration Status Accounting
  B. Configuration Item Costing

• Question 10:

  Which of the following laws or acts, formed in Australia, enforces prohibition against cyber stalking?

  A. Malicious Communications Act (1998)
  B. Anti-Cyber-Stalking law (1999)
  C. Stalking Amendment Act(1999)
  D. Stalking by Electronic Communications Act (2001)
  C. Stalking Amendment Act(1999)