최신 ISSMP 무료덤프 - ISC ISSMP:Information Systems Security Management Professional

문제1

You are the project manager of the GHE Project. You have identified the following risks with the characteristics as shown in the following figure:

How much capital should the project set aside for the risk contingency reserve?

A. $23,750

B. $41,750

C. $232,000

D. $142,000

정답: A

문제2

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

A. Contingency plan

B. Business continuity plan

C. Continuity of Operations Plan

D. Disaster recovery plan

정답: A

문제3

You are documenting your organization's change control procedures for project management. What portion of the change control process oversees features and functions of the product scope?

A. Scope changecontrol system

B. Project integration management

C. Configuration management

D. Product scope management is outside the concerns of the project.

정답: C

문제4

Which of the following statements about the integrity concept of information security management are true? Each correct answer represents a complete solution. Choose three.

A. It ensures that internal information is consistent among all subentities and also consistent with the real-world, external situation.

B. It ensures that unauthorized modifications are not made to data by authorized personnel orprocesses.

C. It determines the actions and behaviors of a single individual within a system

D. It ensures that modifications are not made to data by unauthorized personnel or processes.

정답: A,B,D

문제5

Which of the following statements reflect the 'Code of Ethics Canons' in the '(ISC)2 Code of Ethics'? Each correct answer represents a complete solution. Choose all that apply.

A. Protect society, the commonwealth, and the infrastructure.

B. Give guidance for resolving good versus good and bad versus bad dilemmas.

C. Act honorably, honestly, justly, responsibly, and legally.

D. Provide diligent and competent service to principals.

정답: A,C,D

문제6

Which of the following statements is related with the second law of OPSEC?

A. If you don't know the threat, how do you know what to protect?

B. If you don't know what to protect, how do you know you are protecting it?

C. If you are not protecting it (the critical and sensitive information), the adversary wins!

D. If you don't know about your security resources you could not protect your network.

정답: B

문제7

Which of the following is NOT a valid maturity level of the Software Capability Maturity Model (CMM)?

A. Fundamental level

B. Defined level

C. Repeatable level

D. Managed level

정답: A

문제8

What is a stakeholder analysis chart?

A. It is a matrix that identifies all of the stakeholders and to whom they must report to.

B. It is a matrix that identifies who must communicate with whom.

C. It is a matrix that documents the stakeholders' requirements, when the requirements were created, and when the fulfillment of the requirements took place..

D. It is a matrix that documents stakeholders' threats, perceived threats, and communication needs.

정답: D

문제9

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

A. Single Loss Expectancy (SLE)

B. Exposure Factor (EF)

C. Annualized Rate of Occurrence (ARO)

D. Safeguard

정답: C

문제10

Which of the following concepts represent the three fundamental principles of information security? Each correct answer represents a complete solution. Choose three.

A. Integrity

B. Availability

C. Privacy

D. Confidentiality

정답: A,B,D

문제11

Which of the following liabilities is a third-party liability in which an individual may be responsible for an action by another party?

A. Relational liability

B. Vicarious liability

C. Contributory liability

D. Engaged liability

정답: B

문제12

Which of the following statements reflect the 'Code of Ethics Preamble' in the '(ISC)2 Code of Ethics'? Each correct answer represents a complete solution. Choose all that apply.

A. Strict adherence to this Code is a condition of certification.

B. Safety of the commonwealth, duty to our principals, and to each other requires that we adhere, and be seen to adhere, to the highest ethical standards of behavior.

C. Advance and protect the profession.

D. Provide diligent and competent service to principals.

정답: A,B

문제13

Which of the following is a formula, practice, process, design, instrument, pattern, or compilation of information which is not generally known, but by which a business can obtain an economic advantage over its competitors?

A. Trade secret

B. Copyright

C. Cookie

D. Utility model

정답: A

최신 ISSMP 무료덤프 - ISC ISSMP:Information Systems Security Management Professional

우리와 연락하기

유용한 링크

최신 업데이트