Free CISMP-V9 Exam Dumps

Question 21

When preserving a crime scene for digital evidence, what actions SHOULD a first responder initially make?

A. Remove power from all digital devices at the scene to stop the data changing.
B. Photograph all evidence and triage to determine whether live data capture is necessary.
C. Remove all digital evidence from the scene to prevent unintentional damage.
D. Don't touch any evidence until a senior digital investigator arrives.

Correct Answer:D
https://www.ncjrs.gov/pdffiles1/nij/219941.pdf

Question 22

When seeking third party digital forensics services, what two attributes should one seek when making a choice of service provider?

A. Appropriate company accreditation and staff certification.
B. Formal certification to ISO/IEC 27001 and alignment withISO 17025.
C. Affiliation with local law enforcement bodies and local government regulations.
D. Clean credit references as well as international experience.

Correct Answer:B

Question 23

Whatis the name of the method used to illicitly target a senior person in an organisation so as to try to coerce them Into taking an unwantedaction such as a misdirected high-value payment?

A. Whaling.
B. Spear-phishing.
C. C-suite spamming.
D. Trawling.

Correct Answer:B

Question 24

One traditional use of a SIEM appliance is to monitor for exceptions received via syslog. What system from the following does NOT natively support syslog events?

A. Enterprise Wireless Access Point.
B. Windows Desktop Systems.
C. Linux Web Server Appliances.
D. Enterprise Stateful Firewall.

Correct Answer:C

Question 25

What does a penetration test do that a Vulnerability Scan does NOT?

A. A penetration test seeks to actively exploit any known or discovered vulnerabilities.
B. A penetration test looks for knownvulnerabilities and reports them without further action.
C. A penetration test is always an automated process - a vulnerability scan never is.
D. A penetration test never uses common tools such as Nrnap, Nessus and Metasploit.

Correct Answer:B