Question 1

What term refers to the shared set of values within an organisation that determine how people are expected to behave in regard to information security?

Options :

A : Code of Ethics.

B : Security Culture.

C : System Operating Procedures.

D : Security Policy Framework.

Answer: B

Question 2

Why have MOST European countries developed specific legislation that permits police and security services to monitor communications traffic for specific purposes, such as the detection of crime?

Options :

A : Under the European Convention of Human Rights, the interception of telecommunications represents an interference with the right to privacy.

B : GDPR overrides all previous legislation on information handling, so new laws were needed to ensure authorities did not inadvertently break the law.

C : Police could previously intercept without lawful authority any communications in the course of transmission through a public post or telecoms system.

D : Surveillance of a conversation or an online message by law enforcement agents was previously illegal due to the 1950 version of the Human Rights Convention.

Answer: C

Question 3

Which of the following is a framework and methodology for Enterprise Security Architecture and Service Management?

Options :

A : TOGAF

B : SABSA

C : PCI DSS.

D : OWASP.

Answer: B

Question 4

What Is the root cause as to why SMS messages are open to attackers and abuse?

Options :

A : The store and forward nature of SMS means it is considered a 'fire and forget service'.

B : SMS technology was never intended to be used to transmit high risk content such as One-time payment codes.

C : The vast majority of mobile phones globally support the SMS protocol inexpensively.

D : There are only two mobile phone platforms - Android and iOS - reducing the number of target environments.

Answer: B

Question 5

Which of the following is the MOST important reason for undertaking Continual Professional Development (CPD) within the Information Security sphere?

Options :

A : Professional qualification bodies demand CPD.

B : Information Security changes constantly and at speed.

C : IT certifications require CPD and Security needs to remain credible.

D : CPD is a prerequisite of any Chartered Institution qualification.

Answer: B

Higher Test Marks with Free Online CISMP-V9 Exam Practice

Buying Options: