CISMP-V9 무료 덤프문제 온라인 액세스

When considering the disposal of confidential data, equipment and storage devices, what social engineering technique SHOULD always be taken into consideration?

• A.Tailgating.
• B.Spear Phishing.
• C.Shoulder Surfing.
• D.Dumpster Diving.

What type of diagram used in application threat modeling includes malicious users as well as descriptions like mitigates and threatens?

• A.Misuse case diagrams.
• B.STRIDE charts.
• C.Threat trees.
• D.DREAD diagrams.

Why should a loading bay NEVER be used as a staff entrance?

• A.Loading bays are often dirty places, and staff could find their clothing damaged or made less appropriate for the office.
• B.Loading bays are intrinsically vulnerable, so minimising the people traffic makes securing the areas easier and more effective.
• C.Staff should always enter a facility via a dedicated entrance to ensure smooth access and egress.
• D.Most countries have specific legislation covering loading bays and breaching this could impact on insurance status.

How does network visualisation assist in managing information security?

• A.Visualisation software operates in a way that is rarely and thereby it is less prone to malware infection.
• B.Visualisation provides structured tables and lists that can be analysed using common tools such as MS Excel.
• C.Visualisation can communicate large amounts of data in a manner that is a relatively simple way for people to analyse and interpret.
• D.Visualisation offers unstructured data that records the entirety of the data in a flat, filterable ftle format.

Which of the following is an accepted strategic option for dealing with risk?

• A.Acceptance
• B.Detection.
• C.Correction.
• D.Forbearance.