Free CISMP-V9 Exam Dumps

Question 16

In a security governance framework, which of the following publications would be at the HIGHEST level?

A. Procedures.
B. Standards
C. Policy.
D. Guidelines

Correct Answer:A

Question 17

Which algorithm is a current specification for the encryption of electronic data established by NIST?

A. RSA.
B. AES.
C. DES.
D. PGP.

Correct Answer:B
https://www.nist.gov/publications/advanced-encryption-standard-aes

Question 18

When a digital forensics investigator is conducting art investigation and handling the original data, what KEY principle must they adhere to?

A. Ensure they are competent to be able to do so and be able to justify their actions.
B. Ensure they are being observed by a senior investigator in all actions.
C. Ensure they do not handle the evidence as that mustbe done by law enforcement officers.
D. Ensure the data has been adjusted to meet the investigation requirements.

Correct Answer:A

Question 19

A penetration tester undertaking a port scan of a client's network, discovers a host which responds to requestsonTCP ports 22, 80, 443, 3306and 8080.
What type of device has MOST LIKELY been discovered?

A. File server.
B. Printer.
C. Firewall.
D. Web server

Correct Answer:A

Question 20

What are the different methods that can be used as access controls?
* 1. Detective.
* 2. Physical.
* 3. Reactive.
* 4. Virtual.
* 5. Preventive.

A. 1, 2 and 4.
B. 1, 2 and 3.
C. 1, 2 and 5.
D. 3, 4 and 5.

Correct Answer:C