QUESTION: 57

An organization is setting a security assessment scope with the goal of developing a Security Management Program (SMP). The next step is to select an approach for conducting the risk assessment. Which of the following approaches is MOST effective for the SMP?

Security controls driven assessment that focuses on controls management
Business processes based risk assessment with a focus on business goals
Asset driven risk assessment with a focus on the assets
Data driven risk assessment with a focus on data

Answer(s): B

Show Answer Next Question

QUESTION: 58

Which technique helps system designers consider potential security concerns of their systems and applications?

Threat modeling
Manual inspections and reviews
Source code review
Penetration testing

Answer(s): A

Show Answer Next Question

QUESTION: 59

A security professional can BEST mitigate the risk of using a Commercial Off-The-Shelf (COTS) solution by deploying the application with which of the following controls in place?

Network segmentation
Blacklisting application
Whitelisting application
Hardened configuration

Answer(s): D

Show Answer Next Question

QUESTION: 60

Which of the following BEST describes centralized identity management?

Service providers perform as both the credential and identity provider (IdP).
Service providers identify an entity by behavior analysis versus an identification factor.
Service providers agree to integrate identity system recognition across organizational boundaries.
Service providers rely on a trusted third party (TTP) to provide requestors with both credentials and identifiers.

Answer(s): D

Show Answer Next Question

Free ISC2 CISSP Exam Braindumps (page: 16)

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60

CISSP Exam Discussions & Posts