Question 1

Which of the following should be done at a disaster site before any item is removed, repaired, or replaced?

Options :

A : Take photos of the damage

B : Notify all of the Board of Directors

C : Communicate with the press following the communications plan

D : Dispatch personnel to the disaster recovery (DR) site

Answer: A

Question 2

What is the PRIMARY objective of the post-incident phase of the incident response process in the security operations center (SOC)?

Options :

A : improve the IR process.

B :

Communicate the IR details to the stakeholders.

C : Validate the integrity of the IR.

D : Finalize the IR.

Answer: A

Question 3

Refer to the information below to answer the question.

Desktop computers in an organization were sanitized for re-use in an equivalent security environment. The data was destroyed in accordance with organizational policy and all marking and other external indications of the sensitivity of the data that was formerly stored on the magnetic drives were removed.

Organizational policy requires the deletion of user data from Personal Digital Assistant (PDA) devices before disposal. It may not be possible to delete the user data if the device is malfunctioning. Which destruction method below provides the BEST assurance that the data has been removed?

Options :

A : Knurling

B : Grinding

C : Shredding

D : Degaussing

Answer: C

Question 4

Which of the following is true of Service Organization Control (SOC) reports?

Options :

A : SOC 1 Type 2 reports assess the security, confidentiality, integrity, and availability of an organization-s controls

B : SOC 2 Type 2 reports include information of interest to the service organization-s management

C : SOC 2 Type 2 reports assess internal controls for financial reporting

D : SOC 3 Type 2 reports assess internal controls for financial reporting

Answer: B

Question 5

Sensitive customer data is going to be added to a database. What is the MOST effective implementation for ensuring data privacy?

Options :

A : Discretionary Access Control (DAC) procedures

B : Mandatory Access Control (MAC) procedures

C : Data link encryption

D : Segregation of duties

Answer: D

Free CISSP Mock Exam – Practice Online Confidently

Buying Options: