Online Access Free CISSP-ISSMP Exam Questions

Which of the following statements is true about auditing?

• A.It is used to prevent unauthorized access to network resources.
• B.It is used to secure the network or the computers on the network.
• C.It is used to protect the network against virus attacks.
• D.It is used to track user accounts for file and object access, logon attempts, etc.

Which of the following statements is related with the second law of OPSEC?

• A.If you don't know about your security resources you could not protect your network.
• B.If you don't know what to protect, how do you know you are protecting it?
• C.If you are not protecting it (the critical and sensitive information), the adversary wins!
• D.If you don't know the threat, how do you know what to protect?

Rick is the project manager for TTM project. He is in the process of procuring services from vendors. He makes a contract with a vendor in which he precisely specify the services to be procured, and any changes to the procurement specification will increase the costs to the buyer.
Which type of contract is this?

• A.Cost Plus Fixed Fee Contract
• B.Fixed Price Incentive Fee
• C.Firm Fixed Price
• D.Fixed Price with Economic Price Adjustment

Which of the following is the PRIMARY purpose of a security metrics dashboard presented to the board of directors?

• A.To replace the need for an annual audit
• B.To list every open vulnerability by CVE number
• C.To show granular technical logs
• D.To communicate security posture and risk in business-relevant, digestible terms

Which of the following BEST describes a "phased/rolling" approach to disaster recovery testing maturity?

• A.Jumping directly to full interruption testing without preliminary steps
• B.Progressing from tabletop → structured walkthrough → simulation → parallel test → full interruption test, building confidence and reducing risk incrementally
• C.Testing all systems simultaneously regardless of readiness
• D.Conducting only one type of test throughout the plan's lifecycle