QUESTION: 57

An organization is setting a security assessment scope with the goal of developing a Security Management Program (SMP). The next step is to select an approach for conducting the risk assessment. Which of the following approaches is MOST effective for the SMP?

Security controls driven assessment that focuses on controls management
Business processes based risk assessment with a focus on business goals
Asset driven risk assessment with a focus on the assets
Data driven risk assessment with a focus on data

Answer(s): B

Reveal Solution Next Question

QUESTION: 58

Which technique helps system designers consider potential security concerns of their systems and applications?

Threat modeling
Manual inspections and reviews
Source code review
Penetration testing

Answer(s): A

Reveal Solution Next Question

QUESTION: 59

A security professional can BEST mitigate the risk of using a Commercial Off-The-Shelf (COTS) solution by deploying the application with which of the following controls in place?

Network segmentation
Blacklisting application
Whitelisting application
Hardened configuration

Answer(s): D

Reveal Solution Next Question

QUESTION: 60

Which of the following BEST describes centralized identity management?

Service providers perform as both the credential and identity provider (IdP).
Service providers identify an entity by behavior analysis versus an identification factor.
Service providers agree to integrate identity system recognition across organizational boundaries.
Service providers rely on a trusted third party (TTP) to provide requestors with both credentials and identifiers.

Answer(s): D

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 15)

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60