ISSMP Free Practice Test

Which of the following models uses a directed graph to specify the rights that a subject can transfer to an object or that a subject can take from another subject?

1. A. Take-Grant Protection Model
2. B. Bell-LaPadula Model
3. C. Biba Integrity Model
4. D. Access Matrix

Correct Answer: A

Which of the following statements about Hypertext Transfer Protocol Secure (HTTPS) are true? Each correct answer represents a complete solution. Choose two.

1. A. It uses TCP port 80 as the default port.
2. B. It is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure site.
3. C. It uses TCP port 443 as the default port.
4. D. It is a protocol used to provide security for a database server in an internal networ

Correct Answer: BC

Which of the following laws enacted in United States makes it illegal for an Internet Service Provider (ISP) to allow child pornography to exist on Web sites?

1. A. Child Pornography Prevention Act (CPPA)
2. B. USA PATRIOT Act
3. C. Prosecutorial Remedies and Tools Against the Exploitation of Children Today Act (PROTECT Act)
4. D. Sexual Predators Act

Correct Answer: D

Which of the following elements of BCP process includes the areas of plan implementation, plan testing, and ongoing plan maintenance, and also involves defining and documenting the continuity strategy?

1. A. Business continuity plan development
2. B. Business impact assessment
3. C. Scope and plan initiation
4. D. Plan approval and implementation

Correct Answer: A

Which of the following issues are addressed by the change control phase in the maintenance phase of the life cycle models? Each correct answer represents a complete solution. Choose all that apply.

1. A. Performing quality control
2. B. Recreating and analyzing the problem
3. C. Developing the changes and corresponding tests
4. D. Establishing the priorities of requests

Correct Answer: ABC