Free BCS Foundation Certificate in Information Security Management Principles V9.0 Exam CISMP-V9 Exam Practice Test

Why should a loading bay NEVER be used as a staff entrance?

• Loading bays are intrinsically vulnerable, so minimising the people traffic makes securing the areas easier and more effective.
• Loading bays are often dirty places, and staff could find their clothing damaged or made less appropriate for the office.
• Most countries have specific legislation covering loading bays and breaching this could impact on insurance status.
• Staff should always enter a facility via a dedicated entrance to ensure smooth access and egress.

Which of the following is often the final stage in the information management lifecycle?

• Disposal.
• Creation.
• Use.
• Publication. https://timg.co.nz/blog-the-information-management-life-cycle/

Which of the following is LEASTLIKELY to be the result of a global pandemic impacting on information security?

• A large increase in remote workers operating in insecure premises.
• Additional physical security requirements at data centres and corporate headquarters.
• Increased demand on service desks as users need additional tools such as VPNs.
• An upsurge in activity by attackers seeking vulnerabilities caused by operational changes.

As well as being permitted to access, create, modify and delete information, what right does an Information Owner NORMALLY have in regard to their information?

• To assign access privileges to others.
• To modify associated information that may lead to inappropriate disclosure.
• To access information held in the same format and file structure.
• To delete all indexed data in the dataset.

Which types of organisations are likely to be the target of DDoS attacks?

• Cloud service providers.
• Any financial sector organisations.
• Online retail based organisations.
• Any organisation with an online presence.

James is working with a software programme that completely obfuscates the entire source code, often in the form of a binary executable making it difficult to inspect, manipulate or reverse engineer the original source code.What type of software programme is this?

• Free Source.
• Proprietary Source.
• Interpreted Source.
• Open Source.

For which security-related reason SHOULD staff monitoring critical CCTV systems be rotated regularly during each work session?

• To reduce the chance of collusion between security staff and those being monitored.
• To give experience to monitoring staff across a range of activities for training purposes.
• Health and Safety regulations demand that staff are rotated to prevent posture and vision related harm.
• The human attention span during intense monitoring sessions is about 20 minutes.

Which of the following describes a qualitative risk assessment approach?

• A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
• The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
• The use of Monte-Carlo Analysis and Layers of Protection Analysis (LOPA) to determine the overall severity of a risk.
• The use of Risk Tolerance and Risk Appetite values to determine the overall severity of a risk

What term is used to describe the testing of a continuity plan through a written scenario being used as the basis for discussion and simulation?

• End-to-end testing.
• Non-dynamic modeling
• Desk-top exercise.
• Fault stressing

What Is the first yet MOST simple and important action to take when setting up a new web server?

• Change default system passwords.
• Fully encrypt the hard disk.
• Apply hardening to all applications.
• Patch the OS to the latest version