Free BCS Foundation Certificate in Information Security Management Principles V9.0 Exam CISMP-V9 Exam Practice Test

How does network visualisation assist in managing information security?

• Visualisation can communicate large amounts of data in a manner that is a relatively simple way for people to analyse and interpret.
• Visualisation provides structured tables and lists that can be analysed using common tools such as MS Excel.
• Visualisation offers unstructured data that records the entirety of the data in a flat, filterable ftle format.
• Visualisation software operates in a way that is rarely and thereby it is less prone to malware infection.

The policies, processes, practices, and tools used to align the business value of information with the most appropriate and cost-effective infrastructure from the time information is conceived through its final disposition.Which of the below business practices does this statement define?

• Information Lifecycle Management.
• Information Quality Management.
• Total Quality Management.
• Business Continuity Management. https://www.stitchdata.com/resources/glossary/information-lifecycle-management/#:~:text=%E2%80%9CILM%20is%20comprised%20of%20the,(SNIA%2C%20via%20Infoworld).

When an organisation decides to operate on the public cloud, what does it lose?

• The right to audit and monitor access to its information.
• Control over Intellectual Property Rights relating to its applications.
• Physical access to the servers hosting its information.
• The ability to determine in which geographies the information is stored.

Which of the following cloud delivery models is NOT intrinsically 'trusted' in terms of security by clients using the service?

• Public.
• Private.
• Hybrid.
• Community

What form of training SHOULD developers be undertaking to understand the security of the code they have written and how it can improve security defence whilst being attacked?

• Red Team Training.
• Blue Team Training.
• Black Hat Training.
• Awareness Training.

In order to better improve the security culture within an organisation with a top down approach, which of the following actions at board level is the MOST effective?

• Appointment of a Chief Information Security Officer (CISO).
• Purchasing all senior executives personal firewalls.
• Adopting an organisation wide 'clear desk' policy.
• Developing a security awareness e-learning course.

Which of the following controls would be the MOST relevant and effective in detecting zero day attacks?

• Strong OS patch management
• Vulnerability assessment
• Signature-based intrusion detection.
• Anomaly based intrusion detection. https://www.sciencedirect.com/topics/computer-science/zero-day-attack

Which of the following is NOT a valid statement to include in an organisation's security policy?

• The policy has the support of Board and the Chief Executive.
• The policy has been agreed and amended to suit all third party contractors.
• How the organisation will manage information assurance.
• The compliance with legal and regulatory obligations.

Which type of facility is enabled by a contract with an alternative data processing facility which will provide HVAC, power and communications infrastructure as well computing hardware and a duplication of organisations existing 'live' data?

• Cold site.
• Warm site.
• Hot site.
• Spare site

For which security-related reason SHOULD staff monitoring critical CCTV systems be rotated regularly during each work session?

• To reduce the chance of collusion between security staff and those being monitored.
• To give experience to monitoring staff across a range of activities for training purposes.
• Health and Safety regulations demand that staff are rotated to prevent posture and vision related harm.
• The human attention span during intense monitoring sessions is about 20 minutes.