CISMP-V9 무료 덤프문제 온라인 액세스

Once data has been created In a standard information lifecycle, what step TYPICALLY happens next?

• A.Data Deletion.
• B.Data Publication
• C.Data Archiving.
• D.Data Storage.

What does a penetration test do that a Vulnerability Scan does NOT?

• A.A penetration test seeks to actively exploit any known or discovered vulnerabilities.
• B.A penetration test looks for known vulnerabilities and reports them without further action.
• C.A penetration test is always an automated process - a vulnerability scan never is.
• D.A penetration test never uses common tools such as Nrnap, Nessus and Metasploit.

Which of the following is an accepted strategic option for dealing with risk?

• A.Correction.
• B.Forbearance.
• C.Acceptance
• D.Detection.

Which types of organisations are likely to be the target of DDoS attacks?

• A.Online retail based organisations.
• B.Any financial sector organisations.
• C.Cloud service providers.
• D.Any organisation with an online presence.

Why might the reporting of security incidents that involve personal data differ from other types of security incident?

• A.Data Protection legislation is process-oriented and focuses on quality assurance of procedures and governance rather than data-focused event investigation
• B.Data Protection legislation normally requires the reporting of incidents involving personal data to a Supervisory Authority.
• C.Personal data is normally handled on both IT and non-IT systems so such incidents need to be managed in two streams.
• D.Personal data is not highly transient so its 1 investigation rarely involves the preservation of volatile memory and full forensic digital investigation.