CISSP-ISSMP Exam Questions

Which of the following policies helps reduce the potential damage from the actions of one person?

The goal of Change Management is to ensure that standardized methods and procedures are used for efficient handling of all changes. Which of the following are Change Management ter...

Which of the following is the correct order of digital investigations Standard Operating Procedure (SOP)?

Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agre...

James works as a security manager for SoftTech Inc. He has been working on the continuous process improvement and on the ordinal scale for measuring the maturity of the organizatio...

Which of the following is a set of exclusive rights granted by a state to an inventor or his assignee for a fixed period of time in exchange for the disclosure of an invention?

You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to work from an alternate l...

Which of the following is a process of monitoring data packets that travel across a network?

Policies are considered the first and highest level of documentation, from which the lower-level elements of standards, procedures, and guidelines flow. Drag and drop each policy s...

Mark works as a security manager for SofTech Inc. He is working in a partially equipped office space which contains some of the system hardware, software, telecommunications, and p...

You are documenting your organization's change control procedures for project management. What portion of the change control process oversees features and functions of the product...

Which of the following enables an inventor to legally enforce his right to exclude others from using his invention?

Which of the following are the major tasks of risk management? Each correct answer represents a complete solution. Choose two.

Which of the following statements best describes the consequences of the disaster recovery plan test?

Which of the following ports is the default port for Layer 2 Tunneling Protocol (L2TP) ?

Which of the following statements reflect the 'Code of Ethics Canons' in the '(ISC)2 Code of Ethics'? Each correct answer represents a complete solution. Choose all that apply.

Which of the following issues are addressed by the change control phase in the maintenance phase of the life cycle models? Each correct answer represents a complete solution. Choos...

Which of the following statements about Due Care policy is true?

Andy works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a document to be used to help understand what impact a disruptive event would have on t...

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration managem...

What are the steps related to the vulnerability management program? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is a documentation of guidelines that are used to create archival copies of important data?

Which of the following deals is a binding agreement between two or more persons that is enforceable by law?

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Which of the following types of agreement creates a confidential relationship between the parties to protect any type of confidential and proprietary information or a trade secret?

Which of the following sections come under the ISO/IEC 27002 standard?

Which of the following U.S. Federal laws addresses computer crime activities in communication lines, stations, or systems?

Which of the following access control models uses a predefined set of access privileges for an object of a system?

Which of the following statements about the availability concept of Information security management is true?

Which of the following is a process that identifies critical information to determine if friendly actions can be observed by adversary intelligence systems?

Which of the following administrative policy controls is usually associated with government classifications of materials and the clearances of individuals to access those materials...

Which of the following processes will you involve to perform the active analysis of the system for any potential vulnerabilities that may result from poor or improper system config...

Which of the following are the levels of military data classification system? Each correct answer represents a complete solution. Choose all that apply.

Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?

Which of the following needs to be documented to preserve evidences for presentation in court?

Which of the following statements best explains how encryption works on the Internet?

Which of the following statutes is enacted in the U.S., which prohibits creditors from collecting data from applicants, such as national origin, caste, religion etc?

Which of the following security models deal only with integrity? Each correct answer represents a complete solution. Choose two.

Rick is the project manager for TTM project. He is in the process of procuring services from vendors. He makes a contract with a vendor in which he precisely specify the services t...

You are an Incident manager in Orangesect.Inc. You have been tasked to set up a new extension of your enterprise. The networking, to be done in the new extension, requires differen...

Which of the following security models focuses on data confidentiality and controlled access to classified information?

Fill in the blank with the appropriate phrase. ____________ is the ability to record and report on the configuration baselines associated with each configuration item at any moment...

Fill in the blank with an appropriate phrase.___________ is the process of using a strategy and plan of what patches should be applied to which systems at a specified time. Answer:...

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency,...

Which of the following BCP teams handles financial arrangement, public relations, and media inquiries in the time of disaster recovery?

Eric is the project manager of the NQQ Project and has hired the ZAS Corporation to complete part of the project work for Eric's organization. Due to a change request the ZAS Corpo...

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

You are working as a project manager in your organization. You are nearing the final stages of project execution and looking towards the final risk monitoring and controlling activ...

Della works as a security manager for SoftTech Inc. She is training some of the newly recruited personnel in the field of security management. She is giving a tutorial on DRP. She...

Software Development Life Cycle (SDLC) is a logical process used by programmers to develop software. Which of the following SDLC phases meets the audit objectives defined below: Sy...