Online Access Free CISMP-V9 Exam Questions

What type of diagram used in application threat modeling includes malicious users as well as descriptions like mitigates and threatens?

• A.DREAD diagrams.
• B.Threat trees.
• C.Misuse case diagrams.
• D.STRIDE charts.

What type of attack could directly affect the confidentiality of an unencrypted VoIP network?

• A.Packet Sniffing.
• B.Vishing Attack
• C.Brute Force Attack.
• D.Ransomware.

Which of the following testing methodologies TYPICALLY involves code analysis in an offline environment without ever actually executing the code?

• A.User Testing.
• B.Penetration Testing.
• C.Static Testing.
• D.Dynamic Testing.

How might the effectiveness of a security awareness program be effectively measured?
1) Employees are required to take an online multiple choice exam on security principles.
2) Employees are tested with social engineering techniques by an approved penetration tester.
3) Employees practice ethical hacking techniques on organisation systems.
4) No security vulnerabilities are reported during an audit.
5) Open source intelligence gathering is undertaken on staff social media profiles.

• A.1, 2 and 3.
• B.2, 4 and 5.
• C.3, 4 and 5.
• D.1, 2 and 5.

What term is used to describe the act of checking out a privileged account password in a manner that bypasses normal access controls procedures during a critical emergency situation?

• A.Privileged User Gateway
• B.Enterprise Security Management
• C.Multi Factor Authentication.
• D.Break Glass