ISSMP Free Practice Test

Sarah has created a site on which she publishes a copyrighted material. She is ignorant that she is infringing copyright. Is she guilty under copyright laws?

1. A. No
2. B. Yes

Correct Answer: B

Fill in the blank with the appropriate phrase. is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time.

1. A. Configuration status accounting

Correct Answer: A

How can you calculate the Annualized Loss Expectancy (ALE) that may occur due to a threat?

1. A. Single Loss Expectancy (SLE)/ Exposure Factor (EF)
2. B. Asset Value X Exposure Factor (EF)
3. C. Exposure Factor (EF)/Single Loss Expectancy (SLE)
4. D. Single Loss Expectancy (SLE) X Annualized Rate of Occurrence (ARO)

Correct Answer: D

Which of the following types of activities can be audited for security? Each correct answer represents a
complete solution. Choose three.

1. A. Data downloading from the Internet
2. B. File and object access
3. C. Network logons and logoffs
4. D. Printer access

Correct Answer: BCD

John works as a security manager for Soft Tech Inc. He is working with his team on the disaster recovery management plan. One of his team members has a doubt related to the most cost effective DRP testing plan. According to you, which of the following disaster recovery testing plans is the most cost-effective and efficient way to identify areas of overlap in the plan before conducting more demanding training exercises?

1. A. Full-scale exercise
2. B. Walk-through drill
3. C. Evacuation drill
4. D. Structured walk-through test

Correct Answer: D