ISC CISSP-ISSMP - Information Systems Security Management Professional - CISSP-ISSMP Exam Practice Test
In which of the following phases of the SDLC does the software and other components of the system faithfully incorporate the design specifications and provide proper documentation and training?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
How can you calculate the Annualized Loss Expectancy (ALE) that may occur due to a threat?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
You work as the Senior Project manager in Dotcoiss Inc. Your company has started a software project using configuration management and has completed 70% of it. You need to ensure that the network infrastructure devices and networking standards used in this project are installed in accordance with the requirements of its detailed project design documentation. Which of the following procedures will you employ to accomplish the task?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Which of the following types of cyber stalking damage the reputation of their victim and turn other people against them by setting up their own Websites, blogs or user pages for this purpose?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Which of the following BEST describes the difference between "civil law" and "criminal law" consequences relevant to a data breach?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like for you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
James works as a security manager for SoftTech Inc. He has been working on the continuous process improvement and on the ordinal scale for measuring the maturity of the organization involved in the software processes. According to James, which of the following maturity levels of software CMM focuses on the continuous process improvement?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Fill in the blank with an appropriate phrase.___________ is the process of using a strategy and plan of what patches should be applied to which systems at a specified time.
Correct Answer:
Patch management
Explanation:
Patch management is the process of using a strategy and plan of what patches should be applied to which systems at a specified time. It is the process included in the overall system management. The initiative behind building patch management is to identify and test various types of code changes, with an eye to make the programming code function with a greater degree of efficiency.
Patch management broadens itself to the actual implementation of the code changes and monitors the function of the code to identify any unforeseen circumstances that did not emerge during the testing phase.
Explanation:
Patch management is the process of using a strategy and plan of what patches should be applied to which systems at a specified time. It is the process included in the overall system management. The initiative behind building patch management is to identify and test various types of code changes, with an eye to make the programming code function with a greater degree of efficiency.
Patch management broadens itself to the actual implementation of the code changes and monitors the function of the code to identify any unforeseen circumstances that did not emerge during the testing phase.
Which of the following is a documentation of guidelines that are used to create archival copies of important data?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Which of the following policies helps reduce the potential damage from the actions of one person?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. Which of the following ideas will you consider the best when conducting a security awareness campaign?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An organization monitors the hard disks of its employees' computers from time to time. Which policy does this pertain to?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Which of the following BEST describes the purpose of the MITRE ATT&CK framework from a management/governance perspective?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Which of the following is generally the LEAST effective control type on its own for mitigating insider threats?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).