CISSP Security and Risk Management Quiz

You are completing a review of the controls used to protect a media storage facility in your organization and would like to properly categorize each control that is currently in place. Which of the following control categories accurately describe a fence around a facility? (Select all that apply.)

Laura has been asked to perform an SCA. What type of organization is she most likely in?

Mary is helping a computer user who sees the following message appear on his computer screen. What type of attack has occurred?

Which one of the following organizations would not be automatically subject to the privacy and security requirements of HIPAA if they engage in electronic transactions?

Renee is designing the long-term security plan for her organization and has a three- to five-year planning horizon. H

Ryan is a CISSP-certified cybersecurity professional working in a nonprofit organization. Which of the following ethical obligations apply to his work? (Select all that apply.)

• (ISC)2 Code of Ethics

• Organizational code of ethics

• Federal code of ethics

• RFC 1087

Alan is performing threat modeling and decides that it would be useful to decompose the system into the core elements shown here. What tool is he using?

What important function do senior managers normally fill on a business continuity planning team?

• Arbitrating disputes about criticality

• Evaluating the legal environment

• Training staff

• Designing failure controls

Florian receives a flyer from a U.S. federal government agency announcing that a new administrative law will affect his business operations. Where should he go to find the text of the law?

• United States Code

• Supreme Court rulings

• Code of Federal Regulations

• Compendium of Laws

You are completing your business continuity planning effort and have decided that you want to accept one of the risks. What should you do next?

• Implement new security controls to reduce the risk level.

• Design a disaster recovery plan.

• Repeat the business impact assessment.

• Document your decision-making process.