CSSLP Practice Test

CSSLP Practice Test practice questions, page 10 of 14, with answer review and explanations.

Question 46

Martha registers a domain named Microsoft.in. She tries to sell it to Microsoft Corporation. The infringement of which of the following has she made?

  1. Copyright
  2. Trademark
  3. Patent
  4. Intellectual property

Question 47

Which of the following is a variant with regard to Configuration Management?

  1. A CI that has the same name as another CI but shares no relationship.
  2. A CI that particularly refers to a software version.
  3. A CI that has the same essential functionality as another CI but a bit different in some small manner.
  4. A CI that particularly refers to a hardware specification.

Question 48

The organization level is the Tier 1 and it addresses risks from an organizational perspective. What are the various Tier 1 activities? Each correct answer represents a complete solution. Choose all that apply.

  1. The organization plans to use the degree and type of oversight, to ensure that the risk management strategy is being effectively carried out.
  2. The level of risk tolerance.
  3. The techniques and methodologies an organization plans to employ, to evaluate information system-related security risks.
  4. The RMF primarily operates at Tier 1.

Question 49

An asset with a value of $600,000 is subject to a successful malicious attack threat twice a year. The asset has an exposure of 30 percent to the threat. What will be the annualized loss expectancy?

  1. $360,000
  2. $180,000
  3. $280,000
  4. $540,000

Question 50

Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.

  1. Editor
  2. Custodian
  3. Owner
  4. User
  5. Security auditor