CISSP mcq questions with answer – Set 2

Important Instructions:

• Total Number Of Questions : 10
• Passing Marks : 7
• Each Question Carry 1 Mark, No Negative Marking.
• Do Not Refresh The Page.
• This Is A FREE Online Test, DO NOT Pay Money To Anyone To Attend This Test.
• Best Of Luck…

Results

-

Congratulation…
You Have Passed The Test, You Should Try To The Next One…!!

Rate this post

You May Also Like :   CISSP mcq questions with answer - Set 5

Unfortunately…
You Did Not Pass. Why Not Try It Again?

Rate this post

You May Also Like :   CISSP mcq questions with answer - Set 6

#1. Which of the following is the weakest element in any security solution?

Software products

Software products

Internet connections

Internet connections

Security policies

Security policies

Humans

Humans

#2. When seeking to hire new employees, what is the first step?

Create a job description

Create a job description

Set position classification

Set position classification

Screen candidates

Screen candidates

Request resumes

Request resumes

#3. Which of the following is a primary purpose of an exit interview?

To return the exiting employee’s personal belongings

To return the exiting employee’s personal belongings

To review the nondisclosure agreement

To review the nondisclosure agreement

To evaluate the exiting employee’s performance

To evaluate the exiting employee’s performance

To cancel the exiting employee’s network access accounts

To cancel the exiting employee’s network access accounts

#4. When an employee is to be terminated, which of the following should be done?

Inform the employee a few hours before they are officially terminated.

Inform the employee a few hours before they are officially terminated.

Disable the employee’s network access just as they are informed of the termination.

Disable the employee’s network access just as they are informed of the termination.

Send out a broadcast email informing everyone that a specific employee is to be terminated.

Send out a broadcast email informing everyone that a specific employee is to be terminated.

Wait until you and the employee are the only people remaining in the building before announcing the termination.

Wait until you and the employee are the only people remaining in the building before announcing the termination.

#5. If an organization contracts with outside entities to provide key business functions or services, such as account or technical support, what is the process called that is used to ensure that these entities support sufficient security?

Asset identification

Asset identification

Third-party governance

Third-party governance

Exit interview

Exit interview

Qualitative analysis

Qualitative analysis

#6. A portion of the ______________ is the logical and practical investigation of business processes and organizational policies. This process/policy review ensures that the stated and implemented business tasks, systems, and methodologies are practical, efficient, cost-effective, but most of all (at least in relation to security governance) that they support security through the reduction of vulnerabilities and the avoidance, reduction, or mitigation of risk.

Hybrid assessment

Hybrid assessment

Risk aversion process

Risk aversion process

Countermeasure selection

Countermeasure selection

Documentation review

Documentation review

#7. Which of the following statements is not true?

IT security can provide protection only against logical or technical attacks.

IT security can provide protection only against logical or technical attacks.

The process by which the goals of risk management are achieved is known as risk analysis.

The process by which the goals of risk management are achieved is known as risk analysis.

Risks to an IT infrastructure are all computer based.

Risks to an IT infrastructure are all computer based.

An asset is anything used in a business process or task.

An asset is anything used in a business process or task.

#8. Which of the following is not an element of the risk analysis process?

Analyzing an environment for risks

Analyzing an environment for risks

Creating a cost/benefit report for safeguards to present to upper management

Creating a cost/benefit report for safeguards to present to upper management

Selecting appropriate safeguards and implementing them

Selecting appropriate safeguards and implementing them

Evaluating each threat event as to its likelihood of occurring and cost of the resulting damage

Evaluating each threat event as to its likelihood of occurring and cost of the resulting damage

#9. Which of the following would generally not be considered an asset in a risk analysis?

A development process

A development process

An IT infrastructure

An IT infrastructure

A proprietary system resource

A proprietary system resource

Users’ personal files

Users’ personal files

#10. Which of the following represents accidental or intentional exploitation of vulnerabilities?

Threat events

Threat events

Risks

Risks

Threat agents

Threat agents

Breaches

Breaches

CHECK ANSWER