CISSP-ISSMP 무료 덤프문제 온라인 액세스

John is a security manager evaluating third-party vendors before a merger. Which type of assessment BEST identifies the security risks the acquired company could introduce?

• A.Red team exercise
• B.Penetration test
• C.Due diligence security assessment
• D.Vulnerability scan

Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?

• A.The Configuration Manager
• B.The Service Level Manager
• C.The Change Manager
• D.The IT Security Manager

Which of the following BEST describes the "Daubert standard" as it might relate to digital forensic evidence in U.S. courts?

• A.A standard exclusive to European courts
• B.A standard used by courts to evaluate the reliability and admissibility of expert/scientific testimony, including forensic methodology
• C.A framework for calculating ALE
• D.A standard for classifying data sensitivity

Which of the following is the correct order of the classic risk management process?

• A.Analyze → Treat → Identify → Evaluate
• B.Treat → Identify → Monitor → Analyze
• C.Identify → Analyze → Evaluate → Treat → Monitor
• D.Monitor → Identify → Treat → Analyze

You are a project manager of a large construction project. Within the project you are working with several vendors to complete different phases of the construction. Your client has asked that you arrange for some of the materials a vendor is to install next week in the project to be changed.
According to the change management plan what subsystem will need to manage this change request?

• A.Resources
• B.Cost
• C.Contract
• D.Schedule