Free Access BCS.CISMP-V9.v2022-04-21.q35 Practice Test (Page 4)

Question 11

What does a penetration test do that a Vulnerability Scan does NOT?

A.A penetration test seeks to actively exploit any known or discovered vulnerabilities.

B.A penetration test looks for known vulnerabilities and reports them without further action.

C.A penetration test is always an automated process - a vulnerability scan never is.

D.A penetration test never uses common tools such as Nrnap, Nessus and Metasploit.

Question 12

As well as being permitted to access, create, modify and delete information, what right does an Information Owner NORMALLY have in regard to their information?

A.To access information held in the same format and file structure.

B.To modify associated information that may lead to inappropriate disclosure.

C.To assign access privileges to others.

D.To delete all indexed data in the dataset.

Question 13

In terms of security culture, what needs to be carried out as an integral part of security by all members of an organisation and is an essential component to any security regime?

A.Verification of visitor's ID

B.The 'need to known principle.

C.Access denial measures

D.Appropriate behaviours.

Question 14

What type of attack attempts to exploit the trust relationship between a user client based browser and server based websites forcing the submission of an authenticated request to a third party site?

A.XSS.

B.Parameter Tampering

C.CSRF.

D.SQL Injection.

Question 15

Which of the following statements relating to digital signatures is TRUE?

A.Digital signatures are valid and enforceable in law in most countries in the world.

B.Digital signatures are rarely legally enforceable even if the signers know they are signing a legal document.

C.A digital signature that uses a signer's private key is illegal.

D.Digital signatures are legal unless there is a statutory requirement that predates the digital age.

Other Version: 826BCS.CISMP-V9.v2022-06-01.q34

Latest Upload: 101OCEG.GRCP.v2025-09-11.q211; 101HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 157PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 146Salesforce.Data-Architect.v2025-09-05.q216; 140Adobe.AD0-E605.v2025-09-05.q50

Question 11

Question 12

Question 13

Question 14

Question 15

Download PDF File