ISC CISSP-ISSMP - Information Systems Security Management Professional 認定 CISSP-ISSMP 試験問題:

1. Which of the following issues are addressed by the change control phase in the maintenance phase of the life cycle models? Each correct answer represents a complete solution. Choose all that apply.

A) Performing quality control
B) Developing the changes and corresponding tests
C) Establishing the priorities of requests
D) Recreating and analyzing the problem

2. Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?

A) Configuration Identification
B) Configuration Status Accounting
C) Configuration Verification and Auditing
D) Configuration Item Costing

3. Which of the following plans provides procedures for recovering business operations immediately following a disaster?

A) Business continuity plan
B) Continuity of operation plan
C) Disaster recovery plan
D) Business recovery plan

4. Which of the following statutes is enacted in the U.S., which prohibits creditors from collecting data from applicants, such as national origin, caste, religion etc?

A) The Privacy Act
B) The Fair Credit Reporting Act (FCRA)
C) The Electronic Communications Privacy Act
D) The Equal Credit Opportunity Act (ECOA)

5. Which of the following is NOT a valid maturity level of the Software Capability Maturity Model (CMM)?

A) Defined level
B) Fundamental level
C) Repeatable level
D) Managed level

質問と回答：