QUESTION: 61

Which of the following BEST describes the purpose of performing security certification?

To identify system threats, vulnerabilities, and acceptable level of risk
To formalize the confirmation of compliance to security policies and standards
To formalize the confirmation of completed risk mitigation and risk analysis
To verify that system architecture and interconnections with other systems are effectively implemented

Answer(s): B

Reveal Solution Next Question

QUESTION: 62

The BEST method to mitigate the risk of a dictionary attack on a system is to

use a hardware token.
use complex passphrases.
implement password history.
encrypt the access control list(ACL).

Answer(s): A

Reveal Solution Next Question

QUESTION: 63

In general, servers that are facing the Internet should be placed in ademilitarized zone (DMZ). What is MAIN purpose of the DMZ?

Reduced risk to internal systems.
Prepare the server for potential attacks.
Mitigate the risk associated with the exposed server.
Bypass the need for a firewall.

Answer(s): A

Reveal Solution Next Question

QUESTION: 64

DRAG DROP (Drag & Drop is not supported)
Drag the following Security Engineering terms on the left to the BEST definition on the right.

See Explanation section for answer.

Answer(s): A

Explanation:

Risk - A measure of the extent to which an entity is threatened by a potential circumstance of event, the adverse impacts that would arise if the circumstance or event occurs, and the likelihood of occurrence.
Protection Needs Assessment - The method used to identify the confidentiality, integrity, and availability requirements for organizational and system asset and to characterizerize the adverse impact or consequences should be asset be lost, modified, degraded, disrupted, compromised, or become unavailable.
Threat assessment - The method used to identify and characterize the dangers anticipated throughout the life cycle of the system.
Security Risk Treatment - The method used to identify feasible security risk mitigation options and plans.

Reveal Solution Next Question

Free HCISPP Exam Braindumps (page: 17)

QUESTION: 61

QUESTION: 62

QUESTION: 63

QUESTION: 64

Explanation:

HCISPP Discussions & Posts