[Q59-Q75] Free Sample Questions to Practice CISMP-V9 Certification Test Engine [Oct-2022]

NO.59 A system administrator has created the following “array” as an access control for an organisation.
Developers: create files, update files.
Reviewers: upload files, update files.
Administrators: upload files, delete fifes, update files.
What type of access-control has just been created?

NO.60 In software engineering, what does ‘Security by Design” mean?

NO.61 Which of the following is NOT an information security specific vulnerability?

NO.62 How does the use of a “single sign-on” access control policy improve the security for an organisation implementing the policy?

NO.63 When considering the disposal of confidential data, equipment and storage devices, what social engineering technique SHOULD always be taken into consideration?

NO.64 In order to better improve the security culture within an organisation with a top down approach, which of the following actions at board level is the MOST effective?

NO.65 When handling and investigating digital evidence to be used in a criminal cybercrime investigation, which of the following principles is considered BEST practice?

NO.66 One traditional use of a SIEM appliance is to monitor for exceptions received via syslog.
What system from the following does NOT natively support syslog events?

NO.67 Which of the following is considered to be the GREATEST risk to information systems that results from deploying end-to-end Internet of Things (IoT) solutions?

NO.68 Ensuring the correctness of data inputted to a system is an example of which facet of information security?

NO.69 Which membership based organisation produces international standards, which cover good practice for information assurance?

NO.70 What does a penetration test do that a Vulnerability Scan does NOT?

NO.71 Which of the following is NOT considered to be a form of computer misuse?

NO.72 Why might the reporting of security incidents that involve personal data differ from other types of security incident?

NO.73 Which of the following is NOT a valid statement to include in an organisation’s security policy?

NO.74 What type of attack could directly affect the confidentiality of an unencrypted VoIP network?

NO.75 A penetration tester undertaking a port scan of a client’s network, discovers a host which responds to requests on TCP ports 22, 80, 443, 3306 and 8080.
What type of device has MOST LIKELY been discovered?