Practice CISMP-V9 Exam Online

Question 1

One traditional use of a SIEM appliance is to monitor for exceptions received via syslog.

What system from the following does NOT natively support syslog events?

A : Enterprise Wireless Access Point.

B : Windows Desktop Systems.

C : Linux Web Server Appliances.

D : Enterprise Stateful Firewall.

Answer: C

Question 2

What Is the root cause as to why SMS messages are open to attackers and abuse?

A : The store and forward nature of SMS means it is considered a 'fire and forget service'.

B : SMS technology was never intended to be used to transmit high risk content such as One-time payment codes.

C : The vast majority of mobile phones globally support the SMS protocol inexpensively.

D : There are only two mobile phone platforms - Android and iOS - reducing the number of target environments.

Answer: B

Question 3

Which of the following is a framework and methodology for Enterprise Security Architecture and Service Management?

A : TOGAF

B : SABSA

C : PCI DSS.

D : OWASP.

Answer: B

Question 4

What type of diagram used in application threat modeling includes malicious users as well as descriptions like mitigates and threatens?

A : Threat trees.

B : STRIDE charts.

C : Misuse case diagrams.

D : DREAD diagrams.

Answer: A

Question 5

Which types of organisations are likely to be the target of DDoS attacks?

A : Cloud service providers.

B : Any financial sector organisations.

C : Online retail based organisations.

D : Any organisation with an online presence.

Answer: D

Name:	BCS Foundation Certificate in Information Security Management Principles V9.0
Exam Code:	CISMP-V9
Certification:	IT Service Management
Vendor:	BCS
Total Questions:	103
Last Updated:	Apr 25, 2024

BCS CISMP-V9