Free Access ISC.CISSP.v2021-10-01.q353 Practice Test (Page 20)

Question 91

Refer to the information below to answer the question.
A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provider's facility. This provider will be responsible for the design, development, testing, and support of several critical, customer-based applications used by the organization.
The organization should ensure that the third party's physical security controls are in place so that they

A.allow access by the organization staff at any time.

B.are more rigorous than the original controls.

C.cannot be accessed by subcontractors of the third party.

D.are able to limit access to sensitive information.

Question 92

Which of the following statements is TRUE regarding state-based analysis as a functional software testing technique?

A.Test inputs are obtained from the derived boundaries of the given functional specifications.

B.It is useful for testing communications protocols and graphical user interfaces.

C.It is characterized by the stateless behavior of a process implemented in a function.

D.An entire partition can be covered by considering only one representative value from that partition.

Question 93

Which of the following is the MOST important part of an awareness and training plan to prepare employees for emergency situations?

A.Conducting business continuity and disaster recovery training for those who have a direct role in the recovery

B.Designing business continuity and disaster recovery training programs for different audiences

C.Publishing a corporate business continuity and disaster recovery plan on the corporate website

D.Having emergency contacts established for the general employee population to get information

Question 94

Which of the following elements MUST a compliant EU-US Safe Harbor Privacy Policy contain?

A.An explanation of who can be contacted at the organization collecting the information if corrections are required by the data subject.

B.An explanation of all the technologies employed by the collecting organization in gathering information on the data subject.

C.An explanation of the regulatory frameworks and compliance standards the information collecting organization adheres to.

D.An explanation of how long the data subject's collected information will be retained for and how it will be eventually disposed.

Question 95

What is the PRIMARY purpose of auditing, as it relates to the security review cycle?

A.To ensure the organization's controls and pokies are working as intended

B.To ensure the organization's executive team won't be sued

C.To ensure the organization can still be publicly traded

D.To ensure the organization meets contractual requirements

Other Version: 3712ISC.CISSP.v2026-05-25.q539; 2530ISC.CISSP.v2026-04-20.q414; 12075ISC.CISSP.v2024-12-05.q999; 10982ISC.CISSP.v2024-09-21.q999; 10827ISC.CISSP.v2023-07-03.q999; 3482ISC.CISSP.v2023-04-20.q206; 7979ISC.CISSP.v2022-09-06.q331; 8842ISC.CISSP.v2022-08-27.q376; 14786ISC.CISSP.v2022-04-07.q650; 145ISC.Fast2test.CISSP.v2021-12-03.by.osborn.827q.pdf

Latest Upload: 116PaloAltoNetworks.SSE-Engineer.v2026-10-17.q44; 164Cisco.300-420.v2026-10-17.q324; 195Salesforce.MCE-Con-201.v2026-10-15.q108; 157EMC.NCA.v2026-10-15.q25; 263Apple.Apple-Device-Support.v2026-10-15.q159; 171F5.F5CAB3.v2026-10-14.q47; 182Oracle.1Z0-1048-25.v2026-10-14.q67; 258Cisco.300-730.v2026-10-14.q199; 255Salesforce.Sales-Admn-202.v2026-10-14.q160; 165ServSafe.ServSafe-Manager.v2026-10-13.q32

Question 91

Question 92

Question 93

Question 94

Question 95

Download PDF File