ISC CISSP-ISSMP Online Practice Questions and Exam Preparation

ISC CISSP-ISSMP Online Questions & Answers

• Question 71:

  Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?

  A. The Service Level Manager
  B. The Configuration Manager
  C. The IT Security Manager
  D. The Change Manager
  C. The IT Security Manager

• Question 72:

  Which of the following is a set of exclusive rights granted by a state to an inventor or his assignee for a fixed period of time in exchange for the disclosure of an invention?

  A. Patent
  B. Utility model
  C. Snooping
  D. Copyright
  A. Patent

• Question 73:

  Which of the following anti-child pornography organizations helps local communities to create programs and develop strategies to investigate child exploitation?

  A. Internet Crimes Against Children (ICAC)
  B. Project Safe Childhood (PSC)
  C. Anti-Child Porn.org
  D. Innocent Images National Imitative (IINI)
  B. Project Safe Childhood (PSC)

• Question 74:

  Which of the following can be done over telephone lines, e-mail, instant messaging, and any other method of communication considered private.

  A. Shielding
  B. Spoofing
  C. Eavesdropping
  D. Packaging
  C. Eavesdropping

• Question 75:

  Which of the following documents is described in the statement below? "It is developed along with all processes of the risk management. It contains the results of the qualitative risk analysis, quantitative risk analysis, and risk response

  planning."

  A. Risk register
  B. Risk management plan
  C. Quality management plan
  D. Project charter
  A. Risk register

• Question 76:

  Tomas is the project manager of the QWS Project and is worried that the project stakeholders will want to change the project scope frequently. His fear is based on the many open issues in the project and how the resolution of the issues may lead to additional project changes.

  On what document are Tomas and the stakeholders working in this scenario?

  A. Communications management plan
  B. Change management plan
  C. Issue log
  D. Risk management plan
  B. Change management plan

• Question 77:

  Which of the following is the best method to stop vulnerability attacks on a Web server?

  A. Using strong passwords
  B. Configuring a firewall
  C. Implementing the latest virus scanner
  D. Installing service packs and updates
  D. Installing service packs and updates

• Question 78:

  Ned is the program manager for his organization and he's considering some new materials for his program. He and his team have never worked with these materials before and he wants to ask the vendor for some additional information, a demon, and even some samples.

  What type of a document should Ned send to the vendor?

  A. IFB
  B. RFQ
  C. RFP
  D. RFI
  D. RFI

• Question 79:

  In which of the following SDLC phases is the system's security features configured and enabled, the system is tested and installed or fielded, and the system is authorized for processing?

  A. Initiation Phase
  B. Development/Acquisition Phase
  C. Implementation Phase
  D. Operation/Maintenance Phase
  C. Implementation Phase

• Question 80:

  Della works as a security manager for SoftTech Inc. She is training some of the newly recruited personnel in the field of security management. She is giving a tutorial on DRP. She explains that the major goal of a disaster recovery plan is to provide an organized way to make decisions if a disruptive event occurs and asks for the other objectives of the DRP. If you are among some of the newly recruited personnel in SoftTech Inc, what will be your answer for her ? Each correct answer represents a part of the solution. Choose three.

  A. Protect an organization from major computer services failure.
  B. Minimizethe risk to the organization from delays in providing services.
  C. Guarantee the reliability of standby systems through testing and simulation.
  D. Maximize the decision-making required by personnel during a disaster.
  A. Protect an organization from major computer services failure.
  B. Minimizethe risk to the organization from delays in providing services.
  C. Guarantee the reliability of standby systems through testing and simulation.