最新のCISSP-ISSMP問題集で試験を準備する

ISC CISSP-ISSMP 試験概要:

ISC CISSP-ISSMP 試験シラバストピック:

ISC CISSP-ISSMP - Information Systems Security Management Professional 認定 CISSP-ISSMP 試験問題：

1. Which of the following are the major tasks of risk management? Each correct answer represents a complete solution. Choose two.

A) Risk identification
B) Building Risk free systems
C) Assuring the integrity of organizational data
D) Risk control

2. Which of the following can be prevented by an organization using job rotation and separation of duties policies?

A) Phishing
B) Collusion
C) Buffer overflow
D) Eavesdropping

3. Which of the following analysis provides a foundation for measuring investment of time, money and human resources required to achieve a particular outcome?

A) Cost-benefit analysis
B) Gap analysis
C) Requirement analysis
D) Vulnerability analysis

4. Which of the following BEST summarizes the overarching philosophy an ISSMP-certified professional is expected to bring to an organization?

A) Sole responsibility for hands-on technical remediation of vulnerabilities
B) Deep technical mastery of a single security tool or platform
C) Exclusive focus on regulatory compliance checklists
D) The ability to lead, govern, and align security strategy with business objectives while managing risk across the organization

5. An organization's DRP requires systems to be restored within 8 hours (RTO) but the current warm site setup takes 24 hours to become operational. What should the security manager do FIRST?

A) Reduce the RTO requirement without consulting business stakeholders
B) Immediately terminate the warm site contract
C) Ignore the gap since warm sites are industry standard
D) Escalate the gap between RTO and actual recovery capability to management for a risk-based decision

質問と回答：