ISC CISSP-ISSMP Online Practice Questions and Exam Preparation

ISC CISSP-ISSMP Online Questions & Answers

• Question 31:

  Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

  A. Safeguard
  B. Single Loss Expectancy (SLE)
  C. Exposure Factor (EF)
  D. Annualized Rate of Occurrence (ARO)
  D. Annualized Rate of Occurrence (ARO)

• Question 32:

  Which of the following needs to be documented to preserve evidences for presentation in court?

  A. Separation of duties
  B. Account lockout policy
  C. Incident response policy
  D. Chain of custody
  D. Chain of custody

• Question 33:

  Fill in the blank with an appropriate phrase.________ An is an intensive application of the OPSEC process to an existing operation or activity by a multidiscipline team of experts.

  A. OPSEC assessment
  A. OPSEC assessment

• Question 34:

  You are the Network Administrator for a software company. Due to the nature of your company's business, you have a significant number of highly computer savvy users. However, you have still decided to limit each user access to only those resources required for their job, rather than give wider access to the technical users (such as tech support and software engineering personnel).

  What is this an example of?

  A. The principle of maximum control.
  B. The principle of least privileges.
  C. Proper use of an ACL.
  D. Poor resource management.
  B. The principle of least privileges.

• Question 35:

  Which of the following terms refers to a mechanism which proves that the sender really sent a particular message?

  A. Non-repudiation
  B. Confidentiality
  C. Authentication
  D. Integrity
  A. Non-repudiation

• Question 36:

  Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.

  A. Editor
  B. Custodian
  C. Owner
  D. Security auditor
  E. User
  B. Custodian
  C. Owner
  D. Security auditor
  E. User

• Question 37:

  Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?

  A. Device Seizure
  B. Ontrack
  C. DriveSpy
  D. Forensic Sorter
  C. DriveSpy

• Question 38:

  You work as a Product manager for Marioiss Inc. You have been tasked to start a project for securing the network of your company. You want to employ configuration management to efficiently manage the procedures of the project.

  What will be the benefits of employing

  configuration management for completing this project? Each correct answer represents a complete solution. Choose all that apply.

  A. It provides object, orient, decide and act strategy.
  B. It provides a live documentation of the project.
  C. It provides the risk analysis of project configurations.
  D. It provides the versions for network devices.
  B. It provides a live documentation of the project.
  D. It provides the versions for network devices.

• Question 39:

  Which of the following statements are true about security risks? Each correct answer represents a complete solution. Choose three.

  A. They can be analyzed and measured by the risk analysis process.
  B. They can be removed completely by taking proper actions.
  C. They can be mitigated by reviewing and taking responsible actions based on possible risks.
  D. They are considered an indicator of threats coupled with vulnerability.
  A. They can be analyzed and measured by the risk analysis process.
  C. They can be mitigated by reviewing and taking responsible actions based on possible risks.
  D. They are considered an indicator of threats coupled with vulnerability.

• Question 40:

  Which of the following sites are similar to the hot site facilities, with the exception that they are completely dedicated, self-developed recovery facilities?

  A. Cold sites
  B. Orange sites
  C. Warm sites
  D. Duplicate processing facilities
  D. Duplicate processing facilities