Free CISMP-V9 Exam Braindumps
BCS Foundation Certificate in Information Security Management Principles V9.0 Questions 41–45 (page: 10)

Updated On: 9-Feb-2026

What does a penetration test do that a Vulnerability Scan does NOT?

  1. A penetration test seeks to actively exploit any known or discovered vulnerabilities.
  2. A penetration test looks for known vulnerabilities and reports them without further action.
  3. A penetration test is always an automated process - a vulnerability scan never is.
  4. A penetration test never uses common tools such as Nrnap, Nessus and Metasploit.

Answer(s): B



Which of the following acronyms covers the real-time analysis of security alerts generated by applications and network hardware?

  1. CERT
  2. SIEM.
  3. CISM.
  4. DDoS.

Answer(s): B


Reference:

https://en.wikipedia.org/wiki/Security_information_and_event_management



James is working with a software programme that completely obfuscates the entire source code, often in the form of a binary executable making it difficult to inspect, manipulate or reverse engineer the original source code.
What type of software programme is this?

  1. Free Source.
  2. Proprietary Source.
  3. Interpreted Source.
  4. Open Source.

Answer(s): C



Which of the following testing methodologies TYPICALLY involves code analysis in an offline environment without ever actually executing the code?

  1. Dynamic Testing.
  2. Static Testing.
  3. User Testing.
  4. Penetration Testing.

Answer(s): D



Which term is used to describe the set of processes that analyses code to ensure defined coding practices are being followed?

  1. Quality Assurance and Control
  2. Dynamic verification.
  3. Static verification.
  4. Source code analysis.

Answer(s): D



Viewing page 10 of 21
Viewing questions 46 - 50 out of 100 questions


Post your Comments and Discuss BCS CISMP-V9 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!