CISSP-ISSMP Practice Questions

Which of the following processes is used by remote users to make a secure connection to internal resources after establishing an Internet connection?

Which of the following is a name, symbol, or slogan with which a product is identified?

An organization monitors the hard disks of its employees' computers from time to time. Which policy does this pertain to?

Sarah has created a site on which she publishes a copyrighted material. She is ignorant that she is infringing copyright. Is she guilty under copyright laws?

Which of the following models uses a directed graph to specify the rights that a subject can transfer to an object or that a subject can take from another subject?

Which of the following plans is designed to protect critical business processes from natural or man- made failures or disasters and the resultant loss of capital due to the unavail...

Which of the following concepts represent the three fundamental principles of information security? Each correct answer represents a complete solution. Choose three.

Which of the following can be done over telephone lines, e-mail, instant messaging, and any other method of communication considered private.

You work as the Senior Project manager in Dotcoiss Inc. Your company has started a software project using configuration management and has completed 70% of it. You need to ensure t...

In which of the following mechanisms does an authority, within limitations, specify what objects can be accessed by a subject?

Which of the following access control models are used in the commercial sector? Each correct answer represents a complete solution. Choose two.

Which of the following fields of management focuses on establishing and maintaining consistency of a system's or product's performance and its functional and physical attributes wi...

Which of the following are the ways of sending secure e-mail messages over the Internet? Each correct answer represents a complete solution. Choose two.

You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access...

Which of the following is the process performed between organizations that have unique hardware or software that cannot be maintained at a hot or warm site?

Which of the following involves changing data prior to or during input to a computer in an effort to commit fraud?

Drag and drop the various evidences in the appropriate places. Answer:

Which of the following penetration testing phases involves reconnaissance or data gathering?

Mark works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a document to be used to help understand what impact a disruptive event would have on t...

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency,...

Which of the following protocols is used with a tunneling protocol to provide security?

Peter works as a Computer Hacking Forensic Investigator. He has been called by an organization to conduct a seminar to give necessary information related to sexual harassment withi...

DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December...