BCS CISMP-V9 Quiz 1 Topic 1 Questions 1-5

Question: 1

Which term describes a vulnerability that is unknown and therefore has no mitigating control which is immediately and generally available?

AAdvanced Persistent Threat.

BTrojan.

CStealthware.

DZero-day.
https://en.wikipedia.org/wiki/Zero-day_(computing)

Show Answer

Question: 2

Once data has been created In a standard information lifecycle, what step TYPICALLY happens next?

AData Deletion.

BData Archiving.

CData Storage.

DData Publication

Show Answer

Question: 3

In software engineering, what does 'Security by Design'' mean?

ALow Level and High Level Security Designs are restricted in distribution.

BAll security software artefacts are subject to a code-checking regime.

CThe software has been designed from its inception to be secure.

DAll code meets the technical requirements of GDPR.
https://en.wikipedia.org/wiki/Secure_by_design#:~:text=Secure%20by%20design%20(SBD)%2C,the%20foundation%20to%20be%20secure.&text=Malicious%20practices%20are%20taken%20for,or%20on%20invalid%20user%20input.

Show Answer

Question: 4

Which of the following cloud delivery models is NOT intrinsically "trusted" in terms of security by clients using the service?

APublic.

BPrivate.

CHybrid.

DCommunity

Show Answer

Question: 5

When undertaking disaster recovery planning, which of the following would NEVER be considered a "natural" disaster?

AArson.

BElectromagnetic pulse

CTsunami.

DLightning Strike

Show Answer

BCS CISMP-V9 Quiz:1 Topic:1 Questions:1-5