CISMP-V9 Free Practice Test

Ensuring the correctness of data inputted to a system is an example of which facet of information security?

1. A. Confidentiality.
2. B. Integrity.
3. C. Availability.
4. D. Authenticity.

Correct Answer: B

Which security concept provides redundancy in the event a security control failure or the exploitation of a vulnerability?

1. A. System Integrity.
2. B. Sandboxing.
3. C. Intrusion Prevention System.
4. D. Defence in depth.

Correct Answer: D
https://en.wikipedia.org/wiki/Defense_in_depth_(computing)

James is working with a software programme that completely obfuscates the entire source code, often in the form of a binary executablemaking it difficult to inspect, manipulate or reverse engineer the original source code.
What type of software programme is this?

1. A. Free Source.
2. B. Proprietary Source.
3. C. Interpreted Source.
4. D. Open Source.

Correct Answer: C

What aspect of an employee's contract of employment Is designed to prevent the unauthorised release of confidential data to third parties evenafter an employee has left their employment?

1. A. Segregation of Duties.
2. B. Non-disclosure.
3. C. Acceptable use policy.
4. D. Security clearance.

Correct Answer: B

When handling and investigating digital evidence to be used in a criminal cybercrime investigation, which of the following principles isconsidered BEST practice?

1. A. Digital evidence must not be altered unless absolutely necessary.
2. B. Acquiring digital evidence cart only be carried on digital devices which have been turned off.
3. C. Digital evidence can only be handled by a member of law enforcement.
4. D. Digital devices must be forensically "clean" before investigation.

Correct Answer: D