ISC2 CISSP-ISSMP Exam Dumps 2021

NEW QUESTION 1
Ned is the program manager for his organization and he's considering some new materials for his program. He and his team have never worked with these materials before and he wants to ask the vendor for some additional information, a demon, and even some samples. What type of a document should Ned send to the vendor?

• A. IFB
• B. RFQ
• C. RFP
• D. RFI

Answer: D

NEW QUESTION 2
You are the project manager of the HJK Project for your organization. You and the project team have created risk responses for many of the risk events in the project. Where should you document the proposed responses and the current status of all identified risks?

• A. Risk management plan
• B. Lessons learned documentation
• C. Risk register
• D. Stakeholder management strategy

Answer: C

NEW QUESTION 3
Which of the following architecturally related vulnerabilities is a hardware or software mechanism, which was installed to permit system maintenance and to bypass the system's security protections?

• A. Maintenance hook
• B. Lack of parameter checking
• C. Time of Check to Time of Use (TOC/TOU) attack
• D. Covert channel

Answer: A

NEW QUESTION 4
Which of the following acts is a specialized privacy bill that affects any educational institution to accept any form of funding from the federal government?

• A. HIPAA
• B. COPPA
• C. FERPA
• D. GLBA

Answer: C

NEW QUESTION 5
Mark works as a security manager for SoftTech Inc. He is performing a security awareness program. To be successful in performing the awareness program, he should take into account the needs and current levels of training and understanding of the employees and audience. There are
five key ways, which Mark should keep in mind while performing this activity. Current level of computer usage What the audience really wants to learn How receptive the audience is to the security program How to gain acceptance Who might be a possible ally Which of the following activities is performed in this security awareness process?

• A. Separation of duties
• B. Stunned owl syndrome
• C. Audience participation
• D. Audience segmentation

Answer: D

NEW QUESTION 6
Which of the following are examples of administrative controls that involve all levels of employees within an organization and determine which users have access to what resources and information? Each correct answer represents a complete solution. Choose three.

• A. Employee registration and accounting
• B. Disaster preparedness and recovery plans
• C. Network authentication
• D. Training and awareness
• E. Encryption

Answer: ABD

NEW QUESTION 7
You work as a Product manager for Marioiss Inc. You have been tasked to start a project for securing the network of your company. You want to employ configuration management to efficiently manage the procedures of the project. What will be the benefits of employing configuration management for completing this project? Each correct answer represents a complete solution. Choose all that apply.

• A. It provides object, orient, decide and act strategy.
• B. It provides a live documentation of the project.
• C. It provides the risk analysis of project configurations.
• D. It provides the versions for network device

Answer: BD

NEW QUESTION 8
Which of the following anti-child pornography organizations helps local communities to create programs and develop strategies to investigate child exploitation?

• A. Internet Crimes Against Children (ICAC)
• B. Project Safe Childhood (PSC)
• C. Anti-Child Porn.org
• D. Innocent Images National Imitative (IINI)

Answer: B

NEW QUESTION 9
Which of the following rate systems of the Orange book has no security controls?

• A. D-rated
• B. C-rated
• C. E-rated
• D. A-rated

Answer: A

NEW QUESTION 10
Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?

• A. Device Seizure
• B. Ontrack
• C. DriveSpy
• D. Forensic Sorter

Answer: C

NEW QUESTION 11
Which of the following statements is related with the second law of OPSEC?

• A. If you are not protecting it (the critical and sensitive information), the adversary wins!
• B. If you don't know what to protect, how do you know you are protecting it?
• C. If you don't know about your security resources you could not protect your network.
• D. If you don't know the threat, how do you know what to protect?

Answer: B

NEW QUESTION 12
A Web-based credit card company had collected financial and personal details of Mark before issuing him a credit card. The company has now provided Mark's financial and personal details to another company. Which of the following Internet laws has the credit card issuing company violated?

• A. Copyright law
• B. Trademark law
• C. Privacy law
• D. Security law

Answer: C

NEW QUESTION 13
Which of the following U.S. Federal laws addresses computer crime activities in communication lines, stations, or systems?

• A. 18 U.S.
• B. 1362
• C. 18 U.S.
• D. 1030
• E. 18 U.S.
• F. 1029
• G. 18 U.S.
• H. 2701
• I. 18 U.S.
• J. 2510

Answer: A

NEW QUESTION 14
Which of the following plans provides procedures for recovering business operations immediately following a disaster?

• A. Disaster recovery plan
• B. Business continuity plan
• C. Continuity of operation plan
• D. Business recovery plan

Answer: D

NEW QUESTION 15
Fill in the blank with an appropriate phrase. An is an intensive application of the OPSEC process to an existing operation or activity by a multidiscipline team of experts.

• A. OPSEC assessment

Answer: A

NEW QUESTION 16
Which of the following security models deal only with integrity? Each correct answer represents a complete solution. Choose two.

• A. Biba-Wilson
• B. Clark-Wilson
• C. Bell-LaPadula
• D. Biba

Answer: BD