最新のCISSP-ISSMP問題集で試験を準備する

ISC CISSP-ISSMP 試験概要:

ISC CISSP-ISSMP 試験シラバストピック:

ISC CISSP-ISSMP - Information Systems Security Management Professional 認定 CISSP-ISSMP 試験問題：

1. An organization discovers that an employee has been exfiltrating data slowly over several months to avoid detection thresholds. This is an example of which type of threat?

A) Script kiddie attack
B) Zero-day exploit
C) Advanced Persistent Threat (APT)
D) Insider threat

2. Which of the following BEST describes the value of involving "Human Resources" in contingency planning, beyond payroll continuity?

A) HR's role is limited strictly to post-event disciplinary actions
B) HR involvement is only relevant for IT-related incidents
C) HR supports personnel notification, emergency contact management, employee assistance, and staffing contingency plans during a disruptive event
D) HR has no meaningful role in contingency planning

3. Which of the following BEST describes the role of "risk owner" in an organization's risk management program?

A) The auditor who reviews the risk register annually
B) The person responsible for performing technical patching
C) Any employee who reports a risk
D) The individual accountable for ensuring a specific risk is managed appropriately, including treatment decisions

4. Which of the following acts is a specialized privacy bill that affects any educational institution to accept any form of funding from the federal government?

A) FERPA
B) HIPAA
C) GLBA
D) COPPA

5. Which of the following BEST describes the purpose of a "data classification policy" working together with a "data handling standard"?

A) They serve unrelated purposes
B) Classification defines sensitivity levels; the handling standard specifies the required controls (encryption, access, transmission) for each level
C) Classification only applies to paper records
D) Handling standards replace the need for classification

質問と回答：