[Nov 17, 2022] Latest Questions CISMP-V9 Guide to Prepare Free Practice Tests [Q19-Q33]

4.5/5 - (2 votes)

[Nov 17, 2022] Latest Questions CISMP-V9 Guide to Prepare Free Practice Tests

Reliable CISMP-V9 Dumps Questions Available as Web-Based Practice Test Engine

QUESTION 19
Which of the following is NOT an information security specific vulnerability?

Use of HTTP based Apache web server.

Unpatched Windows operating system.

Confidential data stored in a fire safe.

Use of an unlocked filing cabinet.

QUESTION 20
In business continuity, what is a battle box?

A portable container that holds Items and information useful in the event of an organisational disaster.

An armoured box that holds all an organisation’s backup databases.

A collection of tools and protective equipment to be used in the event of civil disturbance.

A list of names and addresses of staff to be utilised should industrial action prevent access to a building.
http://www.battlebox.biz/why.asp

QUESTION 21
Which of the following is an asymmetric encryption algorithm?

DES.

AES.

ATM.

RSA.
https://www.omnisecu.com/security/public-key-infrastructure/asymmetric-encryption-algorithms.php

QUESTION 22
When considering the disposal of confidential data, equipment and storage devices, what social engineering technique SHOULD always be taken into consideration?

Spear Phishing.

Shoulder Surfing.

Dumpster Diving.

Tailgating.

QUESTION 23
Which algorithm is a current specification for the encryption of electronic data established by NIST?

RSA.

AES.

DES.

PGP.
https://www.nist.gov/publications/advanced-encryption-standard-aes

QUESTION 24
What Is the PRIMARY security concern associated with the practice known as Bring Your Own Device (BYOD) that might affect a large organisation?

Most BYOD involves the use of non-Windows hardware which is intrinsically insecure and open to abuse.

The organisation has significantly less control over the device than over a corporately provided and managed device.

Privately owned end user devices are not provided with the same volume nor frequency of security patch updates as a corporation.

Under GDPR it is illegal for an individual to use a personal device when handling personal information under corporate control.

QUESTION 25
What types of web application vulnerabilities continue to be the MOST prolific according to the OWASP Top 10?

Poor Password Management.

Insecure Deserialsiation.

Injection Flaws.

Security Misconfiguration

QUESTION 26
As well as being permitted to access, create, modify and delete information, what right does an Information Owner NORMALLY have in regard to their information?

To assign access privileges to others.

To modify associated information that may lead to inappropriate disclosure.

To access information held in the same format and file structure.

To delete all indexed data in the dataset.

QUESTION 27
When considering outsourcing the processing of data, which two legal “duty of care” considerations SHOULD the original data owner make?
1 Third party is competent to process the data securely.
2. Observes the same high standards as data owner.
3. Processes the data wherever the data can be transferred.
4. Archive the data for long term third party’s own usage.

2 and 3.

3 and 4.

1 and 4.

1 and 2.

QUESTION 28
Which of the following compliance legal requirements are covered by the ISO/IEC 27000 series?
1. Intellectual Property Rights.
2. Protection of Organisational Records
3. Forensic recovery of data.
4. Data Deduplication.
5. Data Protection & Privacy.

1, 2 and 3

3, 4 and 5

2, 3 and 4

1, 2 and 5

QUESTION 29
What Is the PRIMARY difference between DevOps and DevSecOps?

Within DevSecOps security is introduced at the end of development immediately prior to deployment.

DevSecOps focuses solely on iterative development cycles.

DevSecOps includes security on the same level as continuous integration and delivery.

DevOps mandates that security is integrated at the beginning of the development lifecycle.
https://www.viva64.com/en/b/0710/#:~:text=DevOps%20is%20a%20methodology%20aiming,in%20the%20software%20development%20process.&text=DevSecOps%20is%20a%20further%20development,code%20quality%20and%20reliability%20assurance.

QUESTION 30
When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?

Remove power from all digital devices at the scene to stop the data changing.

Photograph all evidence and triage to determine whether live data capture is necessary.

Remove all digital evidence from the scene to prevent unintentional damage.

Don’t touch any evidence until a senior digital investigator arrives.
https://www.ncjrs.gov/pdffiles1/nij/219941.pdf

QUESTION 31
Which of the following is MOST LIKELY to be described as a consequential loss?

Reputation damage.

Monetary theft.

Service disruption.

Processing errors.

QUESTION 32
What type of attack could directly affect the confidentiality of an unencrypted VoIP network?

Packet Sniffing.

Brute Force Attack.

Ransomware.

Vishing Attack

QUESTION 33
Which of the following uses are NOT usual ways that attackers have of leveraging botnets?

Generating and distributing spam messages.

Conducting DDOS attacks.

Scanning for system & application vulnerabilities.

Undertaking vishing attacks

Loading …

Correct and Up-to-date BCS CISMP-V9 BrainDumps: https://www.dumpsreview.com/CISMP-V9-exam-dumps-review.html

Latest Exams Dumps & Reviews

[Nov 17, 2022] Latest Questions CISMP-V9 Guide to Prepare Free Practice Tests [Q19-Q33]

examdumps

Leave a Reply Cancel reply

examdumps

Related Posts

2026 Realistic PC-BA-FBA-20 100% Pass Guaranteed Download Exam Q&A [Q13-Q30]

2023 Updated Verified Pass PC-BA-FBA-20 Exam – Real Questions & Answers [Q57-Q76]

Leave a Reply Cancel reply