ISSMP ISC2 Exam Questions and Free Practice Test

Question 55

You have created a team of HR Managers and Project Managers for Blue Well Inc. The team will concentrate on hiring some new employees for the company and improving the organization's overall security by turning employees among numerous job positions. Which of the following steps will you perform to accomplish the task?

A. Job rotation

B. Job responsibility

C. Screening candidates

D. Separation of duties

Correct Answer:A

Question 56

Which of the following signatures watches for the connection attempts to well-known, frequently attacked ports?

A. Port signatures

B. Digital signatures

C. Header condition signatures

D. String signatures

Correct Answer:A

Question 57

Which of the following protocols are used to provide secure communication between a client and a server over the Internet? Each correct answer represents a part of the solution. Choose two.

A. TLS

B. HTTP

C. SNMP

D. SSL

Correct Answer:AD

Question 58

You are the project manager of the HJK Project for your organization. You and the project team have created risk responses for many of the risk events in the project. Where should you document the proposed responses and the current status of all identified risks?

A. Risk management plan

B. Lessons learned documentation

C. Risk register

D. Stakeholder management strategy

Correct Answer:C

Question 59

Which of the following fields of management focuses on establishing and maintaining consistency of a system's or product's performance and its functional and physical attributes with its requirements, design, and operational information throughout its life?

A. Configuration management

B. Risk management

C. Procurement management

D. Change management

Correct Answer:A

Question 60

Which of the following statements is related with the first law of OPSEC?

A. If you are not protecting it (the critical and sensitive information), the adversary wins!

B. If you don't know what to protect, how do you know you are protecting it?

C. If you don't know about your security resources you could not protect your network.

D. If you don't know the threat, how do you know what toprotect?

Correct Answer:D

START ISSMP EXAM