BCS CISMP-V9 Study Guide Archives Updated on Jul 15, 2024 [Q19-Q42]

NO.19 When handling and investigating digital evidence to be used in a criminal cybercrime investigation, which of the following principles is considered BEST practice?

NO.20 According to ISO/IEC 27000, which of the following is the definition of a vulnerability?

NO.21 How does the use of a “single sign-on” access control policy improve the security for an organisation implementing the policy?

NO.22 Which of the following is a framework and methodology for Enterprise Security Architecture and Service Management?

NO.23 Which of the following is NOT an accepted classification of security controls?

NO.24 By what means SHOULD a cloud service provider prevent one client accessing data belonging to another in a shared server environment?

NO.25 Which of the following testing methodologies TYPICALLY involves code analysis in an offline environment without ever actually executing the code?

NO.26 When establishing objectives for physical security environments, which of the following functional controls SHOULD occur first?

NO.27 Which security concept provides redundancy in the event a security control failure or the exploitation of a vulnerability?

NO.28 What Is the KEY purpose of appending security classification labels to information?

NO.29 Which of the following statements relating to digital signatures is TRUE?

NO.30 Which security framework impacts on organisations that accept credit cards, process credit card transactions, store relevant data or transmit credit card data?

NO.31 Once data has been created In a standard information lifecycle, what step TYPICALLY happens next?

NO.32 One traditional use of a SIEM appliance is to monitor for exceptions received via syslog.
What system from the following does NOT natively support syslog events?

NO.33 Which of the following acronyms covers the real-time analysis of security alerts generated by applications and network hardware?

NO.34 Which of the following is LEASTLIKELY to be the result of a global pandemic impacting on information security?

NO.35 You are undertaking a qualitative risk assessment of a likely security threat to an information system.
What is the MAIN issue with this type of risk assessment?

NO.36 What term is used to describe the act of checking out a privileged account password in a manner that bypasses normal access controls procedures during a critical emergency situation?

NO.37 Which of the following compliance legal requirements are covered by the ISO/IEC 27000 series?
1. Intellectual Property Rights.
2. Protection of Organisational Records
3. Forensic recovery of data.
4. Data Deduplication.
5. Data Protection & Privacy.

NO.38 When calculating the risk associated with a vulnerability being exploited, how is this risk calculated?

NO.39 James is working with a software programme that completely obfuscates the entire source code, often in the form of a binary executable making it difficult to inspect, manipulate or reverse engineer the original source code.
What type of software programme is this?

NO.40 Geoff wants to ensure the application of consistent security settings to devices used throughout his organisation whether as part of a mobile computing or a BYOD approach.
What technology would be MOST beneficial to his organisation?

NO.41 As well as being permitted to access, create, modify and delete information, what right does an Information Owner NORMALLY have in regard to their information?

NO.42 What type of attack attempts to exploit the trust relationship between a user client based browser and server based websites forcing the submission of an authenticated request to a third party site?