Online Access Free CISMP-V9 Exam Questions

You are undertaking a qualitative risk assessment of a likely security threat to an information system.
What is the MAIN issue with this type of risk assessment?

• A.These risk assessments are largely subjective and require agreement on rankings beforehand.
• B.There needs to be a large amount of previous data to "train" a qualitative risk methodology.
• C.It requires the use of complex software tools to undertake this risk assessment.
• D.Dealing with statistical and other numeric data can often be hard to interpret.

Which of the following compliance legal requirements are covered by the ISO/IEC 27000 series?
1. Intellectual Property Rights.
2. Protection of Organisational Records
3. Forensic recovery of data.
4. Data Deduplication.
5. Data Protection & Privacy.

• A.3, 4 and 5
• B.1, 2 and 5
• C.1, 2 and 3
• D.2, 3 and 4

Which of the following is NOT a valid statement to include in an organisation's security policy?

• A.The compliance with legal and regulatory obligations.
• B.The policy has the support of Board and the Chief Executive.
• C.How the organisation will manage information assurance.
• D.The policy has been agreed and amended to suit all third party contractors.

Ensuring the correctness of data inputted to a system is an example of which facet of information security?

• A.Availability.
• B.Integrity.
• C.Authenticity.
• D.Confidentiality.

What term is used to describe the testing of a continuity plan through a written scenario being used as the basis for discussion and simul-ation?

• A.Desk-top exercise.
• B.Non-dynamic modeling
• C.Fault stressing
• D.End-to-end testing.