File Info
| Exam | Certified Information Systems Security Professional |
| Number | CISSP |
| File Name | ISC.CISSP.TestKing.2020-04-15.152q.vcex |
| Size | 112 KB |
| Posted | Apr 15, 2020 |
| Download | ISC.CISSP.TestKing.2020-04-15.152q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which of the following actions will reduce risk to a laptop before traveling to a high risk area?
- Examine the device for physical tampering
- Implement more stringent baseline configurations
- Purge or re-image the hard disk drive
- Change access codes
Correct answer: D
Question 2
Which of the following represents the GREATEST risk to data confidentiality?
- Network redundancies are not implemented
- Security awareness training is not completed
- Backup tapes are generated unencrypted
- Users have administrative privileges
Correct answer: C
Question 3
When assessing an organization’s security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002, when can management responsibilities be defined?
- Only when assets are clearly defined
- Only when standards are defined
- Only when controls are put in place
- Only procedures are defined
Correct answer: A
Question 4
Which of the following types of technologies would be the MOST cost-effective method to provide a reactive control for protecting personnel in public areas?
- Install mantraps at the building entrances
- Enclose the personnel entry area with polycarbonate plastic
- Supply a duress alarm for personnel exposed to the public
- Hire a guard to protect the public area
Correct answer: D
Question 5
Intellectual property rights are PRIMARY concerned with which of the following?
- Owner’s ability to realize financial gain
- Owner’s ability to maintain copyright
- Right of the owner to enjoy their creation
- Right of the owner to control delivery method
Correct answer: D
Question 6
In the Open System Interconnection (OSI) model, which layer is responsible for the transmission of binary data over a communications network?
- Physical Layer
- Application Layer
- Data-Link Layer
- Network Layer
Correct answer: A
Question 7
Which of the following mandates the amount and complexity of security controls applied to a security risk?
- Security vulnerabilities
- Risk tolerance
- Risk mitigation
- Security staff
Correct answer: C
Question 8
When determining who can accept the risk associated with a vulnerability, which of the following is MOST important?
- Countermeasure effectiveness
- Type of potential loss
- Incident likelihood
- Information ownership
Correct answer: C
Question 9
Which of the following is MOST important when assigning ownership of an asset to a department?
- The department should report to the business owner
- Ownership of the asset should be periodically reviewed
- Individual accountability should be ensured
- All members should be trained on their responsibilities
Correct answer: B
Question 10
Which of the following BEST describes the responsibilities of a data owner?
- Ensuring quality and validation through periodic audits for ongoing data integrity
- Maintaining fundamental data availability, including data storage and archiving
- Ensuring accessibility to appropriate users, maintaining appropriate levels of data security
- Determining the impact the information has on the mission of the organization
Correct answer: C
Explanation:
Reference: http://resources.infosecinstitute.com/category/certifications-training/cissp/domains/asset-security/data-and-system-ownership/#gref Reference: http://resources.infosecinstitute.com/category/certifications-training/cissp/domains/asset-security/data-and-system-ownership/#gref
