CISMP-V9 Free Practice Test

Which standards framework offers a set of IT Service Management best practices to assist organisations in aligning IT service delivery withbusiness goals - including security goals?

1. A. ITIL.
2. B. SABSA.
3. C. COBIT
4. D. ISAGA.

Correct Answer: A
https://www.cherwell.com/it-service-management/library/essential-guides/essential-guide-to-itil-framework-and

Which of the following is an accepted strategic option for dealing with risk?

1. A. Correction.
2. B. Detection.
3. C. Forbearance.
4. D. Acceptance

Correct Answer: A

In terms of security culture, what needs to be carried out as an integral part of security by all members of an organisation and is an essential component to any security regime?

1. A. The 'need to knownprinciple.
2. B. Verification of visitor's ID
3. C. Appropriate behaviours.
4. D. Access denial measures

Correct Answer: D

Why should a loading bay NEVER be used as a staff entrance?

1. A. Loading bays are intrinsically vulnerable, so minimising the people traffic makes securing the areas easier and more effective.
2. B. Loading bays are often dirty places, and staff could find their clothing damaged or made less appropriate for the office.
3. C. Most countries have specific legislation covering loading bays and breaching this could impact on insurance status.
4. D. Staff should always enter a facility via a dedicated entrance to ensure smooth access and egress.

Correct Answer: D

Why might the reporting of security incidents that involve personaldata differ from other types of security incident?

1. A. Personal data is not highly transient so its 1 investigation rarely involves the preservation of volatile memory and full forensic digitalinvestigation.
2. B. Personal data is normally handled on both IT and non-IT systems so such incidents need to be managed in two streams.
3. C. Data Protection legislation normally requires the reporting of incidents involving personal data to a Supervisory Authority.
4. D. Data Protection legislation is process-oriented and focuses on quality assurance of procedures and governance rather thandata-focused event investigation

Correct Answer: D