Online Access Free CISMP-V9 Practice Test

Which of the following describes a qualitative risk assessment approach?

• A.The use of Risk Tolerance and Risk Appetite values to determine the overall severity of a risk
• B.The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
• C.The use of Monte-Carlo Analysis and Layers of Protection Analysis (LOPA) to determine the overall severity of a risk.
• D.A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.

What term is used to describe the act of checking out a privileged account password in a manner that bypasses normal access controls procedures during a critical emergency situation?

• A.Break Glass
• B.Enterprise Security Management
• C.Multi Factor Authentication.
• D.Privileged User Gateway

Which of the following uses are NOT usual ways that attackers have of leveraging botnets?

• A.Scanning for system & application vulnerabilities.
• B.Conducting DDOS attacks.
• C.Generating and distributing spam messages.
• D.Undertaking vishing attacks

When securing a wireless network, which of the following is NOT best practice?

• A.Using WPA encryption on the wireless network.
• B.Use MAC tittering on a SOHO network with a smart group of clients.
• C.Turning on SSID broadcasts to advertise security levels.
• D.Dedicating an access point on a dedicated VLAN connected to a firewall.

What Is the KEY purpose of appending security classification labels to information?

• A.To provide guidance and instruction on implementing appropriate security controls to protect the information.
• B.To comply with whatever mandatory security policy framework is in place within the geographical location in question.
• C.To make sure the correct colour-coding system is used when the information is ready for archive.
• D.To ensure that should the information be lost in transit, it can be returned to the originator using the correct protocols.