ISC CISSP-ISSMP Online Practice Questions and Exam Preparation

ISC CISSP-ISSMP Online Questions & Answers

• Question 101:

  Fill in the blank with the appropriate phrase. ____________ is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time.

  A. Configuration status accounting
  A. Configuration status accounting

• Question 102:

  You work as a project manager for SoftTech Inc. A threat with a dollar value of $150,000 is expected to happen in your project and the frequency of threat occurrence per year is 0.001. What will be the annualized loss expectancy in your project?

  A. $180.25
  B. $150
  C. $100
  D. $120
  B. $150

• Question 103:

  Configuration Management (CM) is an Information Technology Infrastructure Library (ITIL) IT Service Management (ITSM) process. Configuration Management is used for which of the following? 1.To account for all IT assets 2.To provide precise information support to other ITIL disciplines 3.To provide a solid base only for Incident and Problem Management 4.To verify configuration records and correct any exceptions

  A. 1, 3, and 4 only
  B. 2 and 4 only
  C. 1, 2, and 4 only
  D. 2, 3, and 4 only
  C. 1, 2, and 4 only

• Question 104:

  Which of the following authentication protocols provides support for a wide range of authentication methods, such as smart cards and certificates?

  A. PAP
  B. EAP
  C. MS-CHAP v2
  D. CHAP
  B. EAP

• Question 105:

  Which of the following BCP teams handles financial arrangement, public relations, and media inquiries in the time of disaster recovery?

  A. Software team
  B. Off-site storage team
  C. Applications team
  D. Emergency-management team
  D. Emergency-management team

• Question 106:

  You are documenting your organization's change control procedures for project management. What portion of the change control process oversees features and functions of the product scope?

  A. Configuration management
  B. Product scope management is outside the concerns of the project.
  C. Scope changecontrol system D. Project integration management
  A. Configuration management

• Question 107:

  Which of the following statements about system hardening are true? Each correct answer represents a complete solution. Choose two.

  A. It can be achieved by installing service packs and security updates on a regular basis.
  B. It is used for securing the computer hardware.
  C. It can be achieved by locking the computer room.
  D. It is used for securing an operating system.
  A. It can be achieved by installing service packs and security updates on a regular basis.
  D. It is used for securing an operating system.

• Question 108:

  You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program.

  What will be your answer?

  A. It improves the possibility for career advancement of the IT staff.
  B. It improves the security of vendor relations.
  C. It improves the performance of a company's intranet.
  D. It improves awareness of the need to protect system resources.
  D. It improves awareness of the need to protect system resources.

• Question 109:

  Which of the following are the responsibilities of the owner with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

  A. Determining what level of classification the information requires.
  B. Delegating the responsibility of the data protection duties to a custodian.
  C. Reviewing the classification assignments at regular time intervals and making changes as the business needs change.
  D. Running regular backups and routinely testing the validity of the backup data.
  A. Determining what level of classification the information requires.
  B. Delegating the responsibility of the data protection duties to a custodian.
  C. Reviewing the classification assignments at regular time intervals and making changes as the business needs change.

• Question 110:

  Sarah has created a site on which she publishes a copyrighted material. She is ignorant that she is infringing copyright. Is she guilty under copyright laws?

  A. No
  B. Yes
  B. Yes