QUESTION: 109

Using the cipher text and resultant cleartext message to derive the monoalphabetic cipher key is an example of which method of cryptanalytic attack?

Known-plaintext attack
Ciphertext-only attack
Frequency analysis
Probable-plaintext attack

Answer(s): A

Reveal Solution Next Question

QUESTION: 110

When developing an organization's information security budget, it is important that the:

requested funds are at an equal amount to the expected cost of breaches.
expected risk can be managed appropriately with the funds allocated.
requested funds are part of a shared funding pool with other areas.
expected risk to the organization does not exceed the funds allocated.

Answer(s): B

Reveal Solution Next Question

QUESTION: 111

A subscription service which provides power, climate control, raised flooring, and telephone wiring but NOT the computer and peripheral equipment is BEST described as a:

cold site.
warm site.
hot site.
reciprocal site.

Answer(s): A

Reveal Solution Next Question

An international trading organization that holds an International Organization for Standardization (ISO) 27001 certification is seeking to outsource their security monitoring to a managed security service provider (MSSP). The trading organization's security officer is tasked with drafting the requirements that need to be included in the outsourcing contract. Which of the following MUST be included in the contract?

A detailed overview of all equipment involved in the outsourcing contract
The right to perform security compliance tests on the MSSP's equipment
The MSSP having an executive manager responsible for information security
The right to audit the MSSP's security process

Answer(s): D

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 28)

QUESTION: 109

QUESTION: 110

QUESTION: 111

QUESTION: 112