Exam (elaborations)
CISMP ACTUAL EXAM/ Updated Questions with correct Answers/ Advanced 2024/2025
- Course
- Institution
CISMP ACTUAL EXAM/ Updated Questions with correct Answers/ Advanced 2024/2025
[Show more]
1 review
By: zeebakinoo • 1 week ago
Content preview
CISMP ACTUAL EXAM/ Updated Questions with correctAnswers/ Advanced 2024/2025
Which three of the following characteristics form the AAA Triad in Information Security?
1. Authentication
2. Availability
3. Accounting
4. Asymmetry
5. Authorization
Correct Answer -1. Authentication
3. Accounting
5. Authorization
Which of the following is NOT an accepted classification of security controls?
A. Nominative.
B. Preventive.
C. Detective.
D. Corrective
Correct Answer -A. Nominative.
According to ISO/IEC 27000, which of the following is the definition of a vulnerability?
A. A weakness of an asset or group of assets that can be exploited by one or more threats.
B. The impact of a cyber attack on an asset or group of assets.
pg. 1
,C. The threat that an asset or group of assets may be damaged by an exploit. D. The damage that has
been caused by a weakness in a system.
Correct Answer -A. A weakness of an asset or group of assets that can be exploited by one or more
threats.
Which term describes the acknowledgement and acceptance of ownership of actions, decisions, policies
and deliverables?
A. Accountability.
B. Responsibility.
C. Credibility.
D. Confidentiality.
Correct Answer -A. Accountability.
Which security concept provides redundancy in the event a security control failure or the exploitation of
a vulnerability?
A. System Integrity.
B. Sandboxing.
C. Intrusion Prevention System.
D. Defence in depth.
Correct Answer -D. Defence in depth.
Which of the following types of organisation could be considered the MOST at risk from the theft of
electronic based credit card data?
A. Online retailer.
B. Traditional market trader.
C. Mail delivery business.
D. Agricultural producer
Correct Answer -A. Online retailer.
pg. 2
,Which types of organisations are likely to be the target of DDoS attacks?
A. Cloud service providers.
B. Any financial sector organisations.
C. Online retail based organisations.
D. Any organisation with an online presence.
Correct Answer -D. Any organisation with an online presence.
In a security governance framework, which of the following publications would be at the HIGHEST level?
A. Procedures.
B. Standards
C. Policy.
D. Guidelines
Correct Answer -C. Policy.
Which of the following is LEAST LIKELY to be the result of a global pandemic impacting on information
security?
A. A large increase in remote workers operating in insecure premises.
B. Additional physical security requirements at data centres and corporate headquarters.
C. Increased demand on service desks as users need additional tools such as VPNs.
D. An upsurge in activity by attackers seeking vulnerabilities caused by operational changes.
Correct Answer -C. Increased demand on service desks as users need additional tools such as VPNs.
In order to maintain the currency of risk countermeasures, how often SHOULD an organisation review
these risks?
pg. 3
, A. Once defined, they do not need reviewing.
B. A maximum of once every other month.
C. When the next risk audit is due.
D. Risks remain under constant review.
Correct Answer -D. Risks remain under constant review.
Which term describes a vulnerability that is unknown and therefore has no mitigating control which is
immediately and generally available?
A. Advanced Persistent Threat.
B. Trojan.
C. Stealthware.
D. Zero-day.
Correct Answer -D. Zero-day.
Which of the following is MOST LIKELY to be described as a consequential loss?
A. Reputation damage.
B. Monetary theft.
C. Service disruption.
D. Processing errors.
Correct Answer -A. Reputation damage.
Which of the following is considered to be the GREATEST risk to information systems that results from
deploying end-to-end Internet of Things (IoT) solutions?
A. Use of 'cheap" microcontroller-based sensors.
B. Much larger attack surface than traditional IT systems.
pg. 4
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller PastPapers. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
83750 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now