CISMP-V9 Free Practice Test

What advantage does the delivery of online security training material have over the distribution of printed media?

1. A. Updating online material requires a single edi
2. B. Printed material needs to be distributed physically.
3. C. Online training material is intrinsically more accurate than printed material.
4. D. Printed material is a 'discoverable record' and could expose the organisation to litigation in the event of an incident.
5. E. Online material is protected by international digital copyright legislation across most territories.

Correct Answer: B

When seeking third party digital forensics services, what two attributes should one seek when making a choice of service provider?

1. A. Appropriate company accreditation and staff certification.
2. B. Formal certification to ISO/IEC 27001 and alignment withISO 17025.
3. C. Affiliation with local law enforcement bodies and local government regulations.
4. D. Clean credit references as well as international experience.

Correct Answer: B

In a security governance framework, which of the following publications would be at the HIGHEST level?

1. A. Procedures.
2. B. Standards
3. C. Policy.
4. D. Guidelines

Correct Answer: A

What Is the PRIMARY security concern associated with the practice known as Bring Your Own Device (BYOD) that might affect a largeorganisation?

1. A. Most BYOD involves the use of non-Windows hardware which is intrinsically insecure and open to abuse.
2. B. The organisation has significantly less control over the device than over a corporately provided and managed device.
3. C. Privately owned end user devices are not provided with the same volume nor frequency of security patch updates as a corporation.
4. D. Under GDPR it is illegal for an individual to use a personal device when handling personal information under corporate control.

Correct Answer: A

How might the effectiveness of a security awareness program be effectively measured?
1)Employees are required to take an online multiple choice exam on security principles.
2)Employees are tested with social engineering techniques by an approved penetration tester. 3)Employees practice ethical hacking techniques on organisation systems.
4) No security vulnerabilities are reported during an audit.
5) Open source intelligence gathering is undertaken on staff social media profiles.

1. A. 3, 4 and 5.
2. B. 2, 4 and 5.
3. C. 1, 2 and 3.
4. D. 1, 2 and 5.

Correct Answer: C