QUESTION: 153

Which of the following frameworks provides vulnerability metrics and characteristics to support the National Vulnerability Database (NVD)?

Common Vulnerabilities and Exposures (CVE)
Center for Internet Security (CIS)
Common Vulnerability Scoring System (CVSS)
Open Web Application Security Project (OWASP)

Answer(s): C

Reveal Solution Next Question

A security architect is reviewing plans for an application with a Recovery Point Objective (RPO) of 15 minutes. The current design has all of the application infrastructure located within one co-location data center. Which security principle is the architect currently assessing?

Disaster recovery (DR)
Availability
Redundancy
Business continuity (BC)

Answer(s): B

Reveal Solution Next Question

QUESTION: 155

Which factors MUST be considered when classifying information and supporting assets for risk management, legal discovery, and compliance?

System owner roles and responsibilities, data handling standards, storage and secure development lifecycle requirements
Compliance office roles and responsibilities, classified material handling standards, storage system lifecycle requirements
Data stewardship roles, data handling and storage standards, data lifecycle requirements
System authorization roles and responsibilities, cloud computing standards, lifecycle requirements

Answer(s): C

Reveal Solution Next Question

QUESTION: 156

The Chief Information Security Officer (CISO) of a small organization is making a case for building a security operations center (SOC). While debating between an in-house, fully outsourced, or a hybrid capability, which of the following would be the MAIN consideration, regardless of the model?

Headcount and capacity
Scope and service catalog
Skill set and training
Tools and technologies

Answer(s): B

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 39)

QUESTION: 153

QUESTION: 154

QUESTION: 155

QUESTION: 156