CISMP ACTUAL EXAM QUESTIONS AND ANSWERS WITH COMPLETE SOLUTIONS VERIFIED
8 views 0 purchase
Module
CISMP
Institution
CISMP
CISMP ACTUAL EXAM QUESTIONS AND ANSWERS WITH COMPLETE SOLUTIONS VERIFIED
Why is a working group a good idea?
You get perspective from all stakeholders across the business
Confidentiality
The property that information is not made available or disclosed to unauthorised individuals, entities or p...
cismp actual exam questions and answers with compl
Written for
CISMP
All documents for this subject (43)
Seller
Follow
AcademicSuperScores
Reviews received
Content preview
CISMP ACTUAL EXAM QUESTIONS AND ANSWERS WITH
COMPLETE SOLUTIONS VERIFIED
Why is a working group a good idea?
You get perspective from all stakeholders across the business
Confidentiality
The property that information is not made available or disclosed to unauthorised
individuals, entities or processes
Integrity
The property of accuracy and completeness
Availability
The property of informatiuo being accessible upon demand by an authorised entity
Asset
Anything that has value to an organiation
What are the 3 main types of asset?
1. Physical
2. Software
3. Pure information (in any format)
What is the difference between data and information?
Data is the basic facts and stats that can be analysed. Information is the result of this
analysis
Threat
,A potential cause of an unwanted incident that can result in harm to an organisation
Vulnerability
A weakness of an asset or control that can be exploited by one or more threats
Risk
The effect of uncertainty on objectives and the combination of a threat and a
vulnerability
Impact
The result of an info security incident, caused by a threat, which affects assets
True or False
The threat and vulnerability must be present for a risk to exist
True
What is the purpose of a control?
An activity that is taken to manage an identified risk
What are the three main types of strategic control?
Eliminate (Risk avoidance)
Reduce
Transfer
Accept
What is risk avoidance?
The informed decision not to be involved in, or to withdraw from, an activity in order not
to be exposed to a particular risk
What is risk reduction?
Action is taken to lessen the probability, negative consequences associated with the risk
, What is Risk Transfer?
A form of risk treatment involving the agreed distribution of risk with other parties
Why does risk transfer help?
It moves accountability for a risk to another organization that will take on future risk
management. For instance, insurance or writing contracts.
True or False?
Risk transfer will reduce accountability and impact
False. The impact will remain the same
Identity
Info that distinguishes one entity from another
Authentication
Provision of assurance of the claimed identity of an entity
Authorization
The right or permission that is granted to a system entity to access a systemresource
Accountability
The property that ensures that the actions of an entity can be traced uniquely to the
entity
Audit
The review of a party's capacity to meet, or continue to meet, the initial and ongoing
approval agreements as a service provider
Compliance
Meeting or exceeding all applicable requirements or a standard or other published set of
requirements
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller AcademicSuperScores. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for £8.12. You're not tied to anything after your purchase.
