BCS

CISMP-V9

Foundation Certificate in Information Security Management Principles V9.0

https://killexams.com/pass4sure/exam-detail/CISMP-V9

Question: 38

Which of the following is a framework and methodology for Enterprise Security Architecture and Service Management? A . TOGAF

B . SABSA C . PCI DS E . OWAS

Answer: B

Question: 39

How does network visualisation assist in managing information security?

A . Visualisation can communicate large amounts of data in a manner that is a relatively simple way for people to analyse and interpret. B . Visualisation provides structured tables and lists that can be analysed using common tools such as MS Excel.

C . Visualisation offers unstructured data that records the entirety of the data in a flat, filterable ftle format. D . Visualisation software operates in a way that is rarely and thereby it is less prone to malware infection.

Answer: D

Question: 40

Which of the following is NOT a valid statement to include in an organisation’s security policy? A . The policy has the support of Board and the Chief Executive.

B . The policy has been agreed and amended to suit all third party contractors. C . How the organisation will manage information assurance.

D . The compliance with legal and regulatory obligations.

Answer: C

Question: 41

Which security framework impacts on organisations that accept credit cards, process credit card transactions, store relevant data or transmitcredit card data? A . PCI DS

C . TOGA

E . ENISA NI

G . Sarbanes-Oxiey

Answer: A Explanation:

https://digitalguardian.com/blog/what-pci-compliance

Question: 42

Which of the following is NOT considered to be a form of computer misuse? A . Illegal retention of personal data.

B . Illegal interception of information. C . Illegal access to computer systems. D . Downloading of pirated software.

Answer: A

Question: 43

Which term describes the acknowledgement and acceptance of ownership of actions, decisions, policies and deliverables? A . Accountability.

B . Responsibility. C . Credibility.

D . Confidentiality.

Answer: A Explanation:

https://hr.nd.edu/assets/17442/behavior_model_4_ratings_3_.pdf

Question: 44

What form of training SHOULD developers be undertaking to understand the security of the code they have written and how it can improve security defence whilst being attacked? A . Red Team Training.

B . Blue Team Training. C . Black Hat Training. D . Awareness Training.

Answer: C

Question: 45

Which of the following is the MOST important reason for undertaking Continual Professional Development (CPD)within the Information Securitysphere? A . Professional qualification bodies demand CP

C . Information Security changes constantly and at speed.

D . IT certifications require CPD and Security needs to remain credible. E . CPD is a prerequisite of any Chartered Institution qualification.

Answer: B

6$03/( 48(67,216

7KHVH TXHVWLRQV DUH IRU GHPR SXUSRVH RQO\ )XOO YHUVLRQ LV XS WR GDWH DQG FRQWDLQV DFWXDO TXHVWLRQV DQG DQVZHUV

.LOOH[DPV FRP LV DQ RQOLQH SODWIRUP WKDW RIIHUV D ZLGH UDQJH RI VHUYLFHV UHODWHG WR FHUWLILFDWLRQ H[DP SUHSDUDWLRQ 7KH SODWIRUP SURYLGHV DFWXDO TXHVWLRQV H[DP GXPSV DQG SUDFWLFH WHVWV WR KHOS LQGLYLGXDOV SUHSDUH IRU YDULRXV FHUWLILFDWLRQ H[DPV ZLWK FRQILGHQFH +HUH DUH VRPH NH\ IHDWXUHV DQG VHUYLFHV RIIHUHG E\ .LOOH[DPV FRP

$FWXDO ([DP 4XHVWLRQV .LOOH[DPV FRP SURYLGHV DFWXDO H[DP TXHVWLRQV WKDW DUH H[SHULHQFHG LQ WHVW FHQWHUV 7KHVH TXHVWLRQV DUH XSGDWHG UHJXODUO\ WR HQVXUH WKH\ DUH XS WR GDWH DQG UHOHYDQW WR WKH ODWHVW H[DP V\OODEXV %\ VWXG\LQJ WKHVH DFWXDO TXHVWLRQV FDQGLGDWHV FDQ IDPLOLDUL]H WKHPVHOYHV ZLWK WKH FRQWHQW DQG IRUPDW RI WKH UHDO H[DP

([DP 'XPSV .LOOH[DPV FRP RIIHUV H[DP GXPSV LQ 3') IRUPDW 7KHVH GXPSV FRQWDLQ D FRPSUHKHQVLYH FROOHFWLRQ RI TXHVWLRQV DQG DQVZHUV WKDW FRYHU WKH H[DP WRSLFV %\ XVLQJ WKHVH GXPSV FDQGLGDWHV FDQ HQKDQFH WKHLU NQRZOHGJH DQG LPSURYH WKHLU FKDQFHV RI VXFFHVV LQ WKH FHUWLILFDWLRQ H[DP

3UDFWLFH 7HVWV .LOOH[DPV FRP SURYLGHV SUDFWLFH WHVWV WKURXJK WKHLU GHVNWRS 9&( H[DP VLPXODWRU DQG RQOLQH WHVW HQJLQH 7KHVH SUDFWLFH WHVWV VLPXODWH WKH UHDO H[DP HQYLURQPHQW DQG KHOS FDQGLGDWHV DVVHVV WKHLU UHDGLQHVV IRU WKH DFWXDO H[DP 7KH SUDFWLFH WHVWV FRYHU D ZLGH UDQJH RI TXHVWLRQV DQG HQDEOH FDQGLGDWHV WR LGHQWLI\ WKHLU VWUHQJWKV DQG ZHDNQHVVHV

*XDUDQWHHG 6XFFHVV .LOOH[DPV FRP RIIHUV D VXFFHVV JXDUDQWHH ZLWK WKHLU H[DP GXPSV 7KH\ FODLP WKDW E\ XVLQJ WKHLU PDWHULDOV FDQGLGDWHV ZLOO SDVV WKHLU H[DPV RQ WKH ILUVW DWWHPSW RU WKH\ ZLOO UHIXQG WKH SXUFKDVH SULFH 7KLV JXDUDQWHH SURYLGHV DVVXUDQFH DQG FRQILGHQFH WR LQGLYLGXDOV SUHSDULQJ IRU FHUWLILFDWLRQ H[DPV

8SGDWHG &RQWHQW .LOOH[DPV FRP UHJXODUO\ XSGDWHV LWV TXHVWLRQ EDQN DQG H[DP GXPSV WR HQVXUH WKDW WKH\ DUH FXUUHQW DQG UHIOHFW WKH ODWHVW FKDQJHV LQ WKH H[DP V\OODEXV 7KLV KHOSV FDQGLGDWHV VWD\ XS WR GDWH ZLWK WKH H[DP FRQWHQW DQG LQFUHDVHV WKHLU FKDQFHV RI VXFFHVV

7HFKQLFDO 6XSSRUW .LOOH[DPV FRP SURYLGHV IUHH [ WHFKQLFDO VXSSRUW WR DVVLVW FDQGLGDWHV ZLWK DQ\ TXHULHV RU LVVXHV WKH\ PD\ HQFRXQWHU ZKLOH XVLQJ WKHLU VHUYLFHV 7KHLU FHUWLILHG H[SHUWV DUH DYDLODEOH WR SURYLGH JXLGDQFH DQG KHOS FDQGLGDWHV WKURXJKRXW WKHLU H[DP SUHSDUDWLRQ MRXUQH\

'PS .PSF FYBNT WJTJU IUUQT LJMMFYBNT DPN WFOEPST FYBN MJTU

.LOO \RXU H[DP DW )LUVW $WWHPSW *XDUDQWHHG