ISSMP:Information Systems Security Management Professional (ISSMP) Free Practice Test

Question 1

Which of the following types of cyber stalking damage the reputation of their victim and turn other people against them by setting up their own Websites, blogs or user pages for this purpose?

A. Attempts to gather information about the victim

B. False accusations

C. Encouraging others to harass the victim

D. False victimization

Correct Answer: B

Question 2

Which of the following is a name, symbol, or slogan with which a product is identified?

A. Copyright

B. Patent

C. Trade secret

D. Trademark

Correct Answer: D

Question 3

Which of the following processes is used by remote users to make a secure connection to internal resources after establishing an Internet connection?

A. Spoofing

B. Packet filtering

C. Tunneling

D. Packet sniffing

Correct Answer: C

Question 4

Which of the following is the default port for Simple Network Management Protocol (SNMP)?

A. UDP port 161

B. TCP port 110

C. TCP port 25

D. TCP port 80

Correct Answer: A

Question 5

Mark works as a security manager for SofTech Inc. He is working in a partially equipped office space which contains some of the system hardware, software, telecommunications, and power sources. In which of the following types of office sites is he working?

A. Warm site

B. Mobile site

C. Cold site

D. Hot site

Correct Answer: A

Question 6

Which of the following is a process of monitoring data packets that travel across a network?

A. Password guessing

B. Packet filtering

C. Shielding

D. Packet sniffing

Correct Answer: D

Question 7

Management has asked you to perform a risk audit and report back on the results. Bonny,
a project team member asks you what a risk audit is. What do you tell Bonny?

A. A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management process.

B. A risk audit is an audit of all the risks that have occurred in the project and what their true impact on cost and time has been.

C. A risk audit is a review of all the risk probability and impact for the risks, which are still present in the project but which have not yet occurred.

D. A risk audit is a review of all the risks that have yet to occur and what their probability of happening are.

Correct Answer: A

Question 8

What are the steps related to the vulnerability management program? Each correct answer represents a complete solution. Choose all that apply.

A. Maintain and Monitor

B. Baseline the Environment

C. Define Policy

D. Organization Vulnerability

Correct Answer: A,B,C

Question 9

Which of the following deals is a binding agreement between two or more persons that is enforceable by law?

A. Proposal

B. Outsource

C. Contract

D. Service level agreement

Correct Answer: C

Question 10

Which of the following administrative policy controls is usually associated with government classifications of materials and the clearances of individuals to access those materials?

A. Due Care

B. Separation of Duties

C. Acceptable Use

D. Need to Know

Correct Answer: D

Welcome to TestSimulate

ISC ISSMP:Information Systems Security Management Professional (ISSMP) Free Practice Test