Free ISC CISSP-ISSMP Exam Dumps Questions & Answers

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

• A.Continuity of Operations Plan
• B.Disaster recovery plan
• C.Contingency plan
• D.Business continuity plan

Which of the following is the correct order of the classic risk management process?

• A.Identify → Analyze → Evaluate → Treat → Monitor
• B.Analyze → Treat → Identify → Evaluate
• C.Monitor → Identify → Treat → Analyze
• D.Treat → Identify → Monitor → Analyze

Which of the following analysis provides a foundation for measuring investment of time, money and human resources required to achieve a particular outcome?

• A.Vulnerability analysis
• B.Requirement analysis
• C.Gap analysis
• D.Cost-benefit analysis

Which of the following BEST describes why "cross-training" of incident response team members is considered a best practice?

• A.Cross-training only benefits management, not technical staff
• B.Cross-training is unnecessary if the team has enough headcount
• C.It reduces single points of failure in response capability and ensures coverage during absences or high-volume incidents
• D.It eliminates the need for documented runbooks

You company suspects an employee of sending unauthorized emails to competitors. These emails are alleged to contain confidential company dat

• A.Which of the following is the most important step for you to take in preserving the chain of custody?
• B.Make copies of that employee's email.
• C.Preserve the email server including all logs.
• D.Seize the employee's PC.
• E.Place spyware on the employee's PC to confirm these activities.