ISC2 CISSP Quiz 4 Topic 5 Questions 16-20

Question: 1

Which of the following is the MOST important activity an organization performs to ensure that securiy is part of the overall organization culture? A. Ensue security policies are issued to all employees

BPerform formal reviews of security Incidents.

CManage a program of security audits.

DWork with senior management to meet business goals.

Show Answer

Question: 2

Which of the following BEST describles a protection profile (PP)?

AA document that expresses an implementation independent set of security requirements for an Information Technology (IT) product that meets specific consumer needs.

BA document that expresses an implementation dependent set of security retirements which contains only the security functional requirements.

CA document that represents evaluated products where there is a one-to-one correspondence between a PP and a Security Target (ST).

DA document that is used to develop an Information Technology (IT) security product from Its security requirements definition.

Show Answer

Question: 3

Which of the following is the BEST statement for a professional to include as port of businees continuity (BC) procedure?

AA full data backup must be done upon management request.

BAn incremental data backup must be done upon management request.

CA full data backup must be done based on the needs of the business.

DIn incremental data backup must be done after each system change.

Show Answer

Question: 4

Which of the following would present the highert annualized loss expectancy (ALE)?

q4_CISSP

AFire

BEarthquake

CWindstorm

DFlood

Show Answer

Question: 5

What balance MUST be considered when web application developers determine how information application error message should be constructed?

ARisk versus benefit

BAvailability versus auditability

CPerformance versus user satisfaction

DConfidentially versus integrity

Show Answer

ISC2 CISSP Quiz:4 Topic:5 Questions:16-20