Question 1

Which of the fallowing statements is MOST accurate regarding information assets?

Options :

A : International Organization for Standardization (ISO) 27001 compliance specifies which information assets must be included in asset inventory.

B : S3 Information assets include any information that is valuable to the organization,

C : Building an information assets register is a resource-intensive job.

D : Information assets inventory is not required for risk assessment.

Answer: B

Question 2

Which of the following is a direct monetary cost of a security incident?

Options :

A : Morale

B : Reputation

C : Equipment

D : Information

Answer: C

Question 3

Data remanence refers to which of the following?

Options :

A : The remaining photons left in a fiber optic cable after a secure transmission.

B : The retention period required by law or regulation.

C : The magnetic flux created when removing the network connection from a server or personal computer.

D : The residual information left on magnetic storage media after a deletion or erasure.

Answer: D

Question 4

Functional security testing is MOST critical during which phase of the system development life cycle (SDLC)?

Options :

A : Operations / Maintenance

B : Implementation

C : Acquisition / Development

D : Initiation

Answer: B

Question 5

Which of the following is the MOST effective preventative method to identify security flaws in software?

Options :

A : Monitor performance in production environments.

B : Perform a structured code review.

C : Perform application penetration testing.

D : Use automated security vulnerability testing tods.

Answer: B

Free CISSP Mock Exam – Practice Online Confidently