We offers . "Information Systems Security Management Professional", also known as CISSP-ISSMP exam, is a ISC2 Certification. This set of posts, Passing the CISSP-ISSMP exam with , will help you answer those questions. The covers all the knowledge points of the real exam. 100% real and revised by experts!
Online ISC2 CISSP-ISSMP free dumps demo Below:
NEW QUESTION 1
You work as a Web Administrator for Perfect World Inc. The company is planning to host an E-commerce Web site. You are required to design a security plan for it. Client computers with different operating systems will access the Web server. How will you configure the Web server so that it is secure and only authenticated users are able to access it? Each correct answer represents a part of the solution. Choose two.
- A. Use encrypted authentication.
- B. Use the SSL protocol.
- C. Use the EAP protocol.
- D. Use Basic authenticatio
Answer: AB
NEW QUESTION 2
Which of the following divisions of the Trusted Computer System Evaluation Criteria (TCSEC) is based on the Mandatory Access Control (MAC) policy?
- A. Division A
- B. Division D
- C. Division B
- D. Division C
Answer: C
NEW QUESTION 3
Which of the following are the responsibilities of the owner with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.
- A. Determining what level of classification the information requires.
- B. Delegating the responsibility of the data protection duties to a custodian.
- C. Reviewing the classification assignments at regular time intervals and making changes as the business needs change.
- D. Running regular backups and routinely testing the validity of the backup dat
Answer: ABC
NEW QUESTION 4
Electronic communication technology refers to technology devices, such as computers and cell phones, used to facilitate communication. Which of the following is/are a type of electronic communication? Each correct answer represents a complete solution. Choose all that apply.
- A. Internet telephony
- B. Instant messaging
- C. Electronic mail
- D. Post-it note
- E. Blogs
- F. Internet teleconferencing
Answer: ABCEF
NEW QUESTION 5
Della works as a security manager for SoftTech Inc. She is training some of the newly recruited personnel in the field of security management. She is giving a tutorial on DRP. She explains that the major goal of a disaster recovery plan is to provide an organized way to make decisions if a disruptive event occurs and asks for the other objectives of the DRP. If you are among some of the newly recruited personnel in SoftTech Inc, what will be your answer for her question? Each correct answer represents a part of the solution. Choose three.
- A. Protect an organization from major computer services failure.
- B. Minimizethe risk to the organization from delays in providing services.
- C. Guarantee the reliability of standby systems through testing and simulation.
- D. Maximize the decision-making required by personnel during a disaste
Answer: ABC
NEW QUESTION 6
Which of the following statements is true about auditing?
- A. It is used to protect the network against virus attacks.
- B. It is used to track user accounts for file and object access, logon attempts, etc.
- C. It is used to secure the network or the computers on the network.
- D. It is used to prevent unauthorized access to network resource
Answer: B
NEW QUESTION 7
Which of the following is a variant with regard to Configuration Management?
- A. A CI thathas the same name as another CI but shares no relationship.
- B. A CI that particularly refers to a hardware specification.
- C. A CI that has the same essential functionality as another CI but a bit different in some small manner.
- D. A CI that particularly refers to a software versio
Answer: C
NEW QUESTION 8
Which of the following methods for identifying appropriate BIA interviewees' includes examining the organizational chart of the enterprise to understand the functional positions?
- A. Organizational chart reviews
- B. Executive management interviews
- C. Overlaying system technology
- D. Organizational process models
Answer: A
NEW QUESTION 9
Which of the following authentication protocols provides support for a wide range of authentication methods, such as smart cards and certificates?
- A. PAP
- B. EAP
- C. MS-CHAP v2
- D. CHAP
Answer: B
NEW QUESTION 10
Which of the following measurements of an enterprise's security state is the process whereby an organization establishes the parameters within which programs, investments, and acquisitions reach the desired results?
- A. Information sharing
- B. Ethics
- C. Performance measurement
- D. Risk management
Answer: C
NEW QUESTION 11
Which of the following attacks can be mitigated by providing proper training to the employees in an organization?
- A. Social engineering
- B. Smurf
- C. Denial-of-Service
- D. Man-in-the-middle
Answer: A
NEW QUESTION 12
In which of the following contract types, the seller is reimbursed for all allowable costs for performing the contract work and receives a fixed fee payment which is calculated as a percentage of the initial estimated project costs?
- A. Firm Fixed Price Contracts
- B. Cost Plus Fixed Fee Contracts
- C. Fixed Price Incentive Fee Contracts
- D. Cost Plus Incentive Fee Contracts
Answer: B
NEW QUESTION 13
What is a stakeholder analysis chart?
- A. It is a matrix that documents stakeholders' threats, perceived threats, and communication needs.
- B. It is a matrix that identifies all of the stakeholders and to whom they must report to.
- C. It is a matrix that documents the stakeholders' requirements, when the requirements were created, and when the fulfillment of the requirements took place..
- D. It is a matrix that identifies who must communicate with who
Answer: A
NEW QUESTION 14
Which of the following refers to the ability to ensure that the data is not modified or tampered with?
- A. Availability
- B. Non-repudiation
- C. Integrity
- D. Confidentiality
Answer: C
NEW QUESTION 15
Which of the following is the best method to stop vulnerability attacks on a Web server?
- A. Using strong passwords
- B. Configuring a firewall
- C. Implementing the latest virus scanner
- D. Installing service packs and updates
Answer: D
NEW QUESTION 16
Which of the following are known as the three laws of OPSEC? Each correct answer represents a part of the solution. Choose three.
- A. Ifyou don't know the threat, how do you know what to protect?
- B. If you don't know what to protect, how do you know you are protecting it?
- C. If you are not protecting it (the critical and sensitive information), the adversary wins!
- D. If you don't knowabout your security resources you cannot protect your networ
Answer: ABC
100% Valid and Newest Version CISSP-ISSMP Questions & Answers shared by 2passeasy, Get Full Dumps HERE: https://www.2passeasy.com/dumps/CISSP-ISSMP/ (New 218 Q&As)