ISSMP ISC2 Exam Questions and Free Practice Test

Question 31

Which of the following subphases are defined in the maintenance phase of the life cycle models?

A. Change control

B. Configuration control

C. Request control

D. Release control

Correct Answer:ACD

Question 32

Which of the following statements about the availability concept of Information security management is true?

A. It determines actions and behaviors of a single individual within a system.

B. It ensures reliable and timely access to resources.

C. It ensures that unauthorized modifications are not made to data byauthorized personnel or processes.

D. It ensures that modifications are not made to data by unauthorized personnel or processe

Correct Answer:B

Question 33

Which of the following statements are true about security risks? Each correct answer represents a complete solution. Choose three.

A. They can be analyzed and measured by the risk analysis process.

B. They can be removed completely by taking proper actions.

C. They can be mitigated by reviewing and taking responsible actions based on possible risks.

D. They are considered an indicator of threats coupled with vulnerabilit

Correct Answer:ACD

Question 34

Which of the following can be prevented by an organization using job rotation and separation of duties policies?

A. Collusion

B. Eavesdropping

C. Buffer overflow

D. Phishing

Correct Answer:A

Question 35

Which of the following governance bodies provides management, operational and technical controls to satisfy security requirements?

A. Senior Management

B. Business Unit Manager

C. Information Security Steering Committee

D. Chief Information Security Officer

Correct Answer:A

Question 36

You are working as a project manager in your organization. You are nearing the final stages of project execution and looking towards the final risk monitoring and controlling activities. For your project archives, which one of the following is an output of risk monitoring and control?

A. Quantitative risk analysis

B. Qualitative risk analysis

C. Requested changes

D. Risk audits

Correct Answer:C

START ISSMP EXAM