Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. BCS
  5. CISMP-V9

BCS CISMP-V9 Exam
BCS Foundation Certificate in Information Security Management Principles V9.0 (Page 9 )

Updated On: 19-Jan-2026
Page 4 of 21
PDF with 100 Questions

In software engineering, what does 'Security by Design" mean?

  1. Low Level and High Level Security Designs are restricted in distribution.
  2. All security software artefacts are subject to a code-checking regime.
  3. The software has been designed from its inception to be secure.
  4. All code meets the technical requirements of GDPR.

Answer(s): C


Reference:

https://en.wikipedia.org/wiki/Secure_by_design#:~:text=Secure%20by%20design%20(SBD)%2C,the%20foundation%20to%20be%20secure.&text=Malicious%20practices%20are%20taken%20for,or%20 on%20invalid%20user%20input.



What is the name of the method used to illicitly target a senior person in an organisation so as to try to coerce them Into taking an unwanted action such as a misdirected high-value payment?

  1. Whaling.
  2. Spear-phishing.
  3. C-suite spamming.
  4. Trawling.

Answer(s): B



What type of attack attempts to exploit the trust relationship between a user client based browser and server based websites forcing the submission of an authenticated request to a third party site?

  1. XSS.
  2. Parameter Tampering
  3. SQL Injection.
  4. CSRF.

Answer(s): D



Which of the following uses are NOT usual ways that attackers have of leveraging botnets?

  1. Generating and distributing spam messages.
  2. Conducting DDOS attacks.
  3. Scanning for system & application vulnerabilities.
  4. Undertaking vishing attacks

Answer(s): D



Which of the following is the MOST important reason for undertaking Continual Professional Development (CPD) within the Information Security sphere?

  1. Professional qualification bodies demand CPD.
  2. Information Security changes constantly and at speed.
  3. IT certifications require CPD and Security needs to remain credible.
  4. CPD is a prerequisite of any Chartered Institution qualification.

Answer(s): B



Viewing page 9 of 21
Viewing questions 41 - 45 out of 100 questions



Post your Comments and Discuss BCS CISMP-V9 exam prep with other Community members:

Join the CISMP-V9 Discussion