Free CISMP-V9 Exam Dumps

Question 6

What term is used to describe the testing of a continuity plan through a written scenario being used as the basis for discussion and simulation?

A. End-to-end testing.
B. Non-dynamicmodeling
C. Desk-top exercise.
D. Fault stressing
E. C

Correct Answer:E

Question 7

A security analyst has been asked to provide a triple A service (AAA) for both wireless and remote access network services in anorganizationand must avoid using proprietary solutions.
What technology SHOULD they adapt?

A. TACACS+
B. RADIUS.
C. Oauth.
D. MS Access Database.

Correct Answer:C

Question 8

What type of diagram used in application threat modeling includes malicious users as well as descriptions like mitigates and threatens?

A. Threat trees.
B. STRIDE charts.
C. Misuse case diagrams.
D. DREAD diagrams.

Correct Answer:A

Question 9

Which of the following is considered to be the GREATEST risk to information systems that results from deploying end-to-end Internet of Things(IoT) solutions?

A. Use of 'cheap" microcontroller based sensors.
B. Much larger attack surface than traditional IT systems.
C. Use of proprietary networking protocols between nodes.
D. Use of cloud based systems to collect loT data.

Correct Answer:D

Question 10

Which of the following subjects is UNLIKELY to form part of a cloud service provision laaS contract?

A. User security education.
B. Intellectual Property Rights.
C. End-of-service.
D. Liability

Correct Answer:D

The certification names are the trademarks of their respective owners. testpreplab.com certstest.com