최신ISC CISSP-ISSMP - Information Systems Security Management Professional - CISSP-ISSMP무료샘플문제
문제1
Which of the following BEST describes a "false negative" and why it is generally MORE concerning than a false positive from a risk perspective?
Which of the following BEST describes a "false negative" and why it is generally MORE concerning than a false positive from a risk perspective?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제2
You are the project manager of the HJK project for your organization. You and the project team have created risk responses for many of the risk events in the project. A teaming agreement is an example of what risk response?
You are the project manager of the HJK project for your organization. You and the project team have created risk responses for many of the risk events in the project. A teaming agreement is an example of what risk response?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제3
Which of the following is TRUE regarding the relationship between policies, standards, procedures, and guidelines?
Which of the following is TRUE regarding the relationship between policies, standards, procedures, and guidelines?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제4
Fill in the blank with the appropriate phrase. ____________ is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time.
Fill in the blank with the appropriate phrase. ____________ is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time.
정답:
Configuration status accounting
Explanation:
The configuration status accounting procedure is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time. It supports the functional and physical attributes of software at various points in time, and performs systematic control of accounting to the identified attributes for the purpose of maintaining software integrity and traceability throughout the software development life cycle.
Explanation:
The configuration status accounting procedure is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time. It supports the functional and physical attributes of software at various points in time, and performs systematic control of accounting to the identified attributes for the purpose of maintaining software integrity and traceability throughout the software development life cycle.
문제5
Fill in the blank with an appropriate phrase.______________ is used to provide security mechanisms for the storage, processing, and transfer of data.
Fill in the blank with an appropriate phrase.______________ is used to provide security mechanisms for the storage, processing, and transfer of data.
정답:
Data classification
Explanation:
Data classification is used to protect the data based on its sensitivity, secrecy, and confidentiality.
It provides security mechanisms for storage, processing, and transfer of data. Data classification also helps to verify the effort, funds, and resources allocated to save the data, and controls access to it.
Reference: A Practical Guide to Security Assessment, Contents: "Data Classification"
Explanation:
Data classification is used to protect the data based on its sensitivity, secrecy, and confidentiality.
It provides security mechanisms for storage, processing, and transfer of data. Data classification also helps to verify the effort, funds, and resources allocated to save the data, and controls access to it.
Reference: A Practical Guide to Security Assessment, Contents: "Data Classification"
문제6
You are the program manager for your project. You are working with the project managers regarding the procurement processes for their projects. You have ruled out one particular contract type because it is considered too risky for the program. Which one of the following contract types is usually considered to be the most dangerous for the buyer?
You are the program manager for your project. You are working with the project managers regarding the procurement processes for their projects. You have ruled out one particular contract type because it is considered too risky for the program. Which one of the following contract types is usually considered to be the most dangerous for the buyer?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제7
Which of the following are the common roles with regard to data in an information classification program?
Each correct answer represents a complete solution. Choose all that apply.
Which of the following are the common roles with regard to data in an information classification program?
Each correct answer represents a complete solution. Choose all that apply.
정답: C,D,E
설명: (ExamPassdump 회원만 볼 수 있음)
문제8
You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access your remote desktop session. You suspected that some malicious attack was performed on the network of the company. You immediately called the incident response team to handle the situation who enquired the Network Administrator to acquire all relevant information regarding the malfunctioning. The Network Administrator informed the incident response team that he was reviewing the security of the network which caused all these problems. Incident response team announced that this was a controlled event not an incident.
Which of the following steps of an incident handling process was performed by the incident response team?
You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access your remote desktop session. You suspected that some malicious attack was performed on the network of the company. You immediately called the incident response team to handle the situation who enquired the Network Administrator to acquire all relevant information regarding the malfunctioning. The Network Administrator informed the incident response team that he was reviewing the security of the network which caused all these problems. Incident response team announced that this was a controlled event not an incident.
Which of the following steps of an incident handling process was performed by the incident response team?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)