QUESTION: 21

In the "Do" phase of the Plan-Do-Check-Act model, which of the following is performed?

Maintain and improve the Business Continuity Management (BCM) system by taking corrective action, based on the results of management review.
Monitor and review performance against business continuity policy and objectives, report the results to management for review, and determine and authorize actions for remediation and improvement.
Ensure the business continuity policy, controls, processes, and procedures have been implemented.
Ensure that business continuity policy, objectives, targets, controls, processes and procedures relevant to improving business continuity have been established.

Answer(s): C

QUESTION: 22

What industry-recognized document could be used as a baseline reference that is related to data security and business operations or conducting a security assessment?

Service Organization Control (SOC) 1 Type 2
Service Organization Control (SOC) 1 Type 1
Service Organization Control (SOC) 2 Type 2
Service Organization Control (SOC) 2 Type 1

Answer(s): D

Reveal Solution Next Question

QUESTION: 23

A criminal organization is planning an attack on a government network. Which of the following scenarios presents the HIGHEST risk to the organization?

Organization loses control of their network devices.
Network is flooded with communication traffic by the attacker.
Network management communications is disrupted.
Attacker accesses sensitive information regarding the network topology.

Answer(s): A

Reveal Solution Next Question

QUESTION: 24

Which reporting type requires a service organization to describe its system and define its control objectives and controls that are relevant to users' internal control over financial reporting?

Statement on Auditing Standards (SAS) 70
Service Organization Control 1 (SOC1)
Service Organization Control 2 (SOC2)
Service Organization Control 3 (SOC3)

Answer(s): B

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 7)

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

CISSP Exam Discussions & Posts