CISMP-V9 by BCS Actual Free Exam Q&As

Question 1

Which of the following is NOT an accepted classification of security controls?

A. Detective. B. Preventive. C. Corrective. D. Nominative.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

What term refers to the shared set of values within an organisation that determine how people are expected to behave in regard to information security?

A. Security Policy Framework. B. Code of Ethics. C. System Operating Procedures. D. Security Culture.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

In software engineering, what does 'Security by Design" mean?

A. The software has been designed from its inception to be secure. B. All code meets the technical requirements of GDPR. C. All security software artefacts are subject to a code-checking regime. D. Low Level and High Level Security Designs are restricted in distribution.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Why is it prudent for Third Parties to be contracted to meet specific security standards?

A. Vulnerabilities in Third Party networks can be malevolently leveraged to gain illicit access into client environments. B. It is a legal requirement for Third Party support companies to meet client security standards. C. All access to corporate systems must be controlled via a single set of rules if they are to be enforceable. D. Third Parties cannot connect to other sites and networks without a contract of similar legal agreement.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

What Is the KEY purpose of appending security classification labels to information?

A. To comply with whatever mandatory security policy framework is in place within the geographical location in question. B. To provide guidance and instruction on implementing appropriate security controls to protect the information. C. To ensure that should the information be lost in transit, it can be returned to the originator using the correct protocols. D. To make sure the correct colour-coding system is used when the information is ready for archive.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

As well as being permitted to access, create, modify and delete information, what right does an Information Owner NORMALLY have in regard to their information?

A. To delete all indexed data in the dataset. B. To assign access privileges to others. C. To modify associated information that may lead to inappropriate disclosure. D. To access information held in the same format and file structure.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

BCS Foundation Certificate in Information Security Management Principles V9.0 - CISMP-V9 Exam Practice Test