CISSP-ISSMP Practice Test

CISSP-ISSMP Practice Test practice questions, page 8 of 9, with answer review and explanations.

Question 36

A contract cannot have provisions for which one of the following?

  1. Subcontracting the work
  2. Penalties and fines for disclosure of intellectual rights
  3. A deadline for the completion of the work
  4. Illegal activities

Question 37

Your company is covered under a liability insurance policy, which provides various liability coverage for information security risks, including any physical damage of assets, hacking attacks, etc. Which of the following risk management techniques is your company using?

  1. Risk mitigation
  2. Risk transfer
  3. Risk acceptance
  4. Risk avoidance

Question 38

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program. What will be your answer?

  1. It improves the possibility for career advancement of the IT staff.
  2. It improves the security of vendor relations.
  3. It improves the performance of a company's intranet.
  4. It improves awareness of the need to protect system resources.

Question 39

You are responsible for network and information security at a metropolitan police station. The most important concern is that unauthorized parties are not able to access data. What is this called?

  1. Availability
  2. Encryption
  3. Integrity
  4. Confidentiality

Question 40

What component of the change management system is responsible for evaluating, testing, and documenting changes created to the project scope?

  1. Scope Verification
  2. Project Management Information System
  3. Integrated Change Control
  4. Configuration Management System