BCS Foundation Certificate in Information Security Management Principles V9.0 (CISMP-V9) Free Practice Test

Question 1

When handling and investigating digital evidence to be used in a criminal cybercrime investigation, which of the following principles is considered BEST practice?

A. Digital evidence can only be handled by a member of law enforcement.

B. Acquiring digital evidence cart only be carried on digital devices which have been turned off.

C. Digital evidence must not be altered unless absolutely necessary.

D. Digital devices must be forensically "clean" before investigation.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

When securing a wireless network, which of the following is NOT best practice?

A. Dedicating an access point on a dedicated VLAN connected to a firewall.

B. Use MAC tittering on a SOHO network with a smart group of clients.

C. Turning on SSID broadcasts to advertise security levels.

D. Using WPA encryption on the wireless network.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

When securing a wireless network, which of the following is NOT best practice?

A. Dedicating an access point on a dedicated VLAN connected to a firewall.

B. Use MAC tittering on a SOHO network with a smart group of clients.

C. Turning on SSID broadcasts to advertise security levels.

D. Using WPA encryption on the wireless network.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Why might the reporting of security incidents that involve personal data differ from other types of security incident?

A. Data Protection legislation is process-oriented and focuses on quality assurance of procedures and governance rather than data-focused event investigation

B. Data Protection legislation normally requires the reporting of incidents involving personal data to a Supervisory Authority.

C. Personal data is not highly transient so its 1 investigation rarely involves the preservation of volatile memory and full forensic digital investigation.

D. Personal data is normally handled on both IT and non-IT systems so such incidents need to be managed in two streams.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which of the following is a framework and methodology for Enterprise Security Architecture and Service Management?

A. OWASP.

B. TOGAF

C. PCI DSS.

D. SABSA

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which membership based organisation produces international standards, which cover good practice for information assurance?

A. BSI.

B. OWASP.

C. ISF.

D. IETF.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

When considering the disposal of confidential data, equipment and storage devices, what social engineering technique SHOULD always be taken into consideration?

A. Shoulder Surfing.

B. Dumpster Diving.

C. Tailgating.

D. Spear Phishing.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which standards framework offers a set of IT Service Management best practices to assist organisations in aligning IT service delivery with business goals - including security goals?

A. ISAGA.

B. SABSA.

C. ITIL.

D. COBIT

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

A security analyst has been asked to provide a triple A service (AAA) for both wireless and remote access network services in an organization and must avoid using proprietary solutions.
What technology SHOULD they adapt?

A. TACACS+

B. Oauth.

C. MS Access Database.

D. RADIUS.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Which of the following is an accepted strategic option for dealing with risk?

A. Detection.

B. Acceptance

C. Forbearance.

D. Correction.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

BCS Foundation Certificate in Information Security Management Principles V9.0 (CISMP-V9) Free Practice Test