ISSMP Free Practice Test

Which of the following is NOT a valid maturity level of the Software Capability Maturity Model (CMM)?

1. A. Managed level
2. B. Defined level
3. C. Fundamental level
4. D. Repeatable level

Correct Answer: C

Against which of the following does SSH provide protection? Each correct answer represents a complete solution. Choose two.

1. A. IP spoofing
2. B. Broadcast storm
3. C. Password sniffing
4. D. DoS attack

Correct Answer: AC

Which of the following terms describes a repudiation of a contract that occurs before the time when performance is due?

1. A. Expected breach
2. B. Actual breach
3. C. Anticipatory breach
4. D. Nonperforming breach

Correct Answer: C

Which of the following persons is responsible for testing and verifying whether the security policy is properly implemented, and the derived security solutions are adequate or not?

1. A. Data custodian
2. B. Auditor
3. C. User
4. D. Data owner

Correct Answer: B

Which of the following contract types is described in the statement below? "This contract type provides no incentive for the contractor to control costs and hence is rarely utilized."

1. A. Cost Plus Fixed Fee
2. B. Cost Plus Percentage of Cost
3. C. Cost Plus Incentive Fee
4. D. Cost Plus Award Fee

Correct Answer: B