1 FEDVTE CISSP: ISSMP PREP 2024/2 5. EXAM REVIEW QUESTIONS AND ANSWERS , RATED A+/ VERIFIED . Which security framework is developed around a set of best practices for IT core operational processes including capacity and availability ma nagement and IT financial management? - ✅✅ -ITIL The first step in the ITIL incident management process is: - ✅✅ -Incident detection and recording Which of the following is NOT one of the goals of effective IS Governance? - ✅✅ -Not A. Regarding the Committ ee of Sponsoring Organizations of the Treadway Commission (COSO), which is NOT one of the five areas of internal control necessary to meet financial reporting and disclosure objectives? - ✅✅ -Not D. A company database containing personally identifiable inf ormation has been breached by hackers. The initial response should be: - ✅✅ -Confirm the incident Your organization performs full backups every week on Sunday nights at 3am and differential backups every night at 3am. You have a failure at 4pm, Wednesday a fternoon. Which series of backups do you require? - ✅✅ -Sunday nights full backup and Tuesday night's differential backup Outsourced (Third Party) Security Providers provide all of the following services except: - ✅✅ -Not C or D Which of the following is N OT a database security control? - ✅✅ -Username Which of the following is not an appropriate method of evaluating personnel for security risks? - ✅✅ -
Passport number verification and validation Which of the following demonstrate(s) that program managers and system owners have consciously incorporated privacy protections throughout the development life cycle of a system or program. - ✅✅ -
Not B or D Your companys email resources are being consumed by a high level of spam. Employees are beginning to complain. W hat should you do to limit the amount of spam your organization receives? - ✅✅ -Use advanced heuristics to maximize detections and minimize false positives. A critical first step in disaster recovery and contingency planning is which of the following? - ✅✅ -
Conduct a business impact analysis Which of the following is the top method of managing risk inherent to wireless networks? - ✅✅ -Utilize private key based encryption to connect to the wireless network. According to NIST SP 800 64, the decision to initiate system development leads to: - ✅✅ -Not C If a coworker accesses another coworkers email client and reads an email message in the outbox what is he in violation of? - ✅✅ -Not B All of the following are v ulnerabilities EXCEPT: - ✅✅ -Not B or C Which of the following is NOT a method of botnet detection? - ✅✅ -Employee email monitoring During the time immediately following a disaster who should be contacted first? - ✅✅ -The person designated in the business c ontinuity disaster recovery plan Logging is an example of the ___________ control category. - ✅✅ -Detect Which group protects the organization when dealing with cross cutting IS issues such as compliance, liability, and corporate responsibility? - ✅✅ -Not C A root kit was used to capture detailed accounts receivable information. To ensure admissibility of evidence from a legal standpoint, once the incident was identified and the server isolated, the next step should be to: - ✅✅ -Take an image copy of the me dia
Passport number verification and validation Which of the following demonstrate(s) that program managers and system owners have consciously incorporated privacy protections throughout the development life cycle of a system or program. - ✅✅ -
Not B or D Your companys email resources are being consumed by a high level of spam. Employees are beginning to complain. W hat should you do to limit the amount of spam your organization receives? - ✅✅ -Use advanced heuristics to maximize detections and minimize false positives. A critical first step in disaster recovery and contingency planning is which of the following? - ✅✅ -
Conduct a business impact analysis Which of the following is the top method of managing risk inherent to wireless networks? - ✅✅ -Utilize private key based encryption to connect to the wireless network. According to NIST SP 800 64, the decision to initiate system development leads to: - ✅✅ -Not C If a coworker accesses another coworkers email client and reads an email message in the outbox what is he in violation of? - ✅✅ -Not B All of the following are v ulnerabilities EXCEPT: - ✅✅ -Not B or C Which of the following is NOT a method of botnet detection? - ✅✅ -Employee email monitoring During the time immediately following a disaster who should be contacted first? - ✅✅ -The person designated in the business c ontinuity disaster recovery plan Logging is an example of the ___________ control category. - ✅✅ -Detect Which group protects the organization when dealing with cross cutting IS issues such as compliance, liability, and corporate responsibility? - ✅✅ -Not C A root kit was used to capture detailed accounts receivable information. To ensure admissibility of evidence from a legal standpoint, once the incident was identified and the server isolated, the next step should be to: - ✅✅ -Take an image copy of the me dia
