BCS Foundation Certificate in Information Security Management Principles V9.0

Question 1

What term is used to describe the testing of a continuity plan through a written scenario being used as the basis for discussion and simul-ation?

A. End-to-end testing.

B. Desk-top exercise.

C. Non-dynamic modeling

D. Fault stressing

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

What are the different methods that can be used as access controls?
1. Detective.
2. Physical.
3. Reactive.
4. Virtual.
5. Preventive.

A. 3, 4 and 5.

B. 1, 2 and 3.

C. 1, 2 and 5.

D. 1, 2 and 4.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which of the following controls would be the MOST relevant and effective in detecting zero day attacks?

A. Anomaly based intrusion detection.

B. Strong OS patch management

C. Signature-based intrusion detection.

D. Vulnerability assessment

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which algorithm is a current specification for the encryption of electronic data established by NIST?

A. RSA.

B. DES.

C. AES.

D. PGP.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Why is it prudent for Third Parties to be contracted to meet specific security standards?

A. Vulnerabilities in Third Party networks can be malevolently leveraged to gain illicit access into client environments.

B. All access to corporate systems must be controlled via a single set of rules if they are to be enforceable.

C. It is a legal requirement for Third Party support companies to meet client security standards.

D. Third Parties cannot connect to other sites and networks without a contract of similar legal agreement.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

When considering outsourcing the processing of data, which two legal "duty of care" considerations SHOULD the original data owner make?
1 Third party is competent to process the data securely.
2. Observes the same high standards as data owner.
3. Processes the data wherever the data can be transferred.
4. Archive the data for long term third party's own usage.

A. 1 and 4.

B. 1 and 2.

C. 2 and 3.

D. 3 and 4.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Ensuring the correctness of data inputted to a system is an example of which facet of information security?

A. Availability.

B. Integrity.

C. Authenticity.

D. Confidentiality.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

When securing a wireless network, which of the following is NOT best practice?

A. Dedicating an access point on a dedicated VLAN connected to a firewall.

B. Use MAC tittering on a SOHO network with a smart group of clients.

C. Turning on SSID broadcasts to advertise security levels.

D. Using WPA encryption on the wireless network.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

BCS Foundation Certificate in Information Security Management Principles V9.0 - CISMP-V9 Exam Practice Test

Latest Update

Useful Links

Contact Us