CISSP-ISSMP: Information Systems Security Management Professional — Free Practice Questions
10 free sample questions from a bank of 71, with the correct answers and explanations. No signup required — start practising right now.
1Which of the following fields of management focuses on establishing and maintaining consistency of a system's or product's performance and its functional and
physical attributes with its requirements, design, and operational information throughout its life?
Configuration management
Risk management
Procurement management
Change management
Answer: A
2Which of the following are the ways of sending secure e-mail messages over the Internet? Each correct answer represents a complete solution. Choose two.
TLS
PGP
S/MIME
IPSec
Answer: B, C
3You work as a Senior Marketing Manger for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you
were not able to access your remote desktop session. You suspected that some malicious attack was performed on the network of the company. You immediately
called the incident response team to handle the situation who enquired the Network Administrator to acquire all relevant information regarding the malfunctioning.
The Network Administrator informed the incident response team that he was reviewing the security of the network which caused all these problems. Incident
response team announced that this was a controlled event not an incident. Which of the following steps of an incident handling process was performed by the
incident response team?
Containment
Eradication
Preparation
Identification
Answer: D
4Which of the following is the process performed between organizations that have unique hardware or software that cannot be maintained at a hot or warm site?
Cold sites arrangement
Business impact analysis
Duplicate processing facilities
Reciprocal agreements
Answer: D
5Which of the following involves changing data prior to or during input to a computer in an effort to commit fraud?
Data diddling
Wiretapping
Eavesdropping
Spoofing
Answer: A
6Which of the following penetration testing phases involves reconnaissance or data gathering?
Attack phase
Pre-attack phase
Post-attack phase
Out-attack phase
Answer: B
7Mark works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a document to be used to help understand what impact a disruptive
event would have on the business. The impact might be financial or operational. Which of the following are the objectives related to the above phase in which
Mark is involved? Each correct answer represents a part of the solution. Choose three.
Resource requirements identification
Criticality prioritization
Down-time estimation
Performing vulnerability assessment
Answer: A, B, C
8Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security
problem, emergency, or state of affairs?
Business continuity plan
Disaster recovery plan
Continuity of Operations Plan
Contingency plan
Answer: D
9Which of the following protocols is used with a tunneling protocol to provide security?
FTP
IPX/SPX
IPSec
EAP
Answer: C
10Which of the following subphases are defined in the maintenance phase of the life cycle models?