CISSP-ISSMP無料問題集「ISC CISSP-ISSMP - Information Systems Security Management Professional」

質問 1

Sarah has created a site on which she publishes a copyrighted material. She is ignorant that she is infringing copyright. Is she guilty under copyright laws?

（A）Yes

（B）No

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which of the following BEST describes a "Computer Security Incident Response Team (CSIRT)" charter's PRIMARY purpose?

（A）To document network diagrams

（B）To list vendor contract terms

（C）To replace the need for an incident response plan

（D）To formally define the CSIRT's mission, scope, authority, and responsibilities within the organization

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which of the following BEST describes the PRIMARY reason an ISSMP-certified professional should understand basic financial concepts (e.g., NPV, ROI, TCO)?

（A）Security leaders must justify investments, prioritize spending, and communicate value in terms executives and finance teams understand and use for organizational decision-making

（B）ISSMP exam questions never touch on financial/business concepts

（C）Financial concepts are the sole responsibility of the CFO

（D）Financial literacy has no relevance to security management roles

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which of the following BEST describes "resilience" as distinct from "recovery" in business continuity planning?

（A）Resilience is the same concept as recovery

（B）Resilience is irrelevant to BCP

（C）Resilience is the capacity to continue operating through disruption; recovery is restoring operations after disruption has occurred

（D）Recovery only applies to IT systems, while resilience applies to people

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which of the following is the process performed between organizations that have unique hardware or software that cannot be maintained at a hot or warm site?

（A）Cold sites arrangement

（B）Duplicate processing facilities

（C）Business impact analysis

（D）Reciprocal agreements

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which of the following is the MOST appropriate action when a security policy conflicts with an operational business need?

（A）The conflict should be escalated through governance channels for a risk-based exception or policy revision decision

（B）Employees should quietly work around the policy

（C）Operations should always override policy

（D）Policy should always override operations regardless of context

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

（A）Contingency plan

（B）Disaster recovery plan

（C）Continuity of Operations Plan

（D）Business continuity plan

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which of the following response teams aims to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing among members and the community at large?

（A）CSIRT

（B）FedCIRC

（C）CERT

（D）FIRST

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Which of the following access control models are used in the commercial sector? Each correct answer represents a complete solution. Choose two.

（A）Clark-Wilson model

（B）Bell-LaPadula model

（C）Biba model

（D）Clark-Biba model

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CISSP-ISSMP 無料問題集「ISC CISSP-ISSMP - Information Systems Security Management Professional」

弊社を連絡する

関連リンク

トップ試験