Free ISC CISSP-ISSMP Exam Dumps Questions & Answers

Which of the following are the responsibilities of a custodian with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

• A.Performing data restoration from the backups when necessary
• B.Running regular backups and routinely testing the validity of the backup data
• C.Determining what level of classification the information requires
• D.Controlling access, adding and removing privileges for individual users

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program. What will be your answer?

• A.It improves the performance of a company's intranet.
• B.It improves the possibility for career advancement of the IT staff.
• C.It improves the security of vendor relations.
• D.It improves awareness of the need to protect system resources.

Which of the following is the BEST approach when a critical vulnerability is identified in a legacy system that cannot be patched due to vendor end-of-life status?

• A.Implement compensating controls (e.g., network segmentation, enhanced monitoring) and develop a risk-based remediation/replacement plan
• B.Immediately decommission the system without business consultation
• C.Accept the risk without documentation
• D.Ignore the vulnerability since patching isn't possible

Which of the following security models dictates that subjects can only access objects through applications?

• A.Biba-Clark model
• B.Clark-Wilson
• C.Bell-LaPadula
• D.Biba model

Andy works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a document to be used to help understand what impact a disruptive event would have on the business. Choose and reorder the required steps that he will take to accomplish the BIA phase.

Correct Answer:

Explanation:
The required steps that Andy will take to accomplish the BIA phase are as follows :
1.Gathering the needed assessment materials.
2.Performing the vulnerability assessment.
3.Analyzing the information compiled.
4.Documenting the results and presenting recommendations.
Reference: CISM Review Manual 2010, Contents: "Incident management and response"