stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CISSP Domain 1 Quiz#1 Flashcards | StudBud
Explore
/
CISSP Domain 1 Quiz#1
CISSP Domain 1 Quiz#1
22 terms
·
StudBud Administration
·
33 plays
Imported from external platform
Flashcards
22 cards
F
Practice quiz
P
Host live
L
Questions
22
Answers
1
Read the question and pick the best answer
Trade secret
Trademark
Copyright
Patent
2
How is Single Loss Expectancy (SLE) calculated?
Threat + Vulnerability
Asset Value * Exposure Factor
Annualized rate of occurrence * Exposure Factor
Annualized rate of occurrence / Exposure Factor
3
How is Annualized Loss Expectancy (ALE) calculated?
Threat + Vulnerability
Annualized Rate of Occurrence / Exposure Factor
Single Loss Expectancy * Annualized Rate of Occurrence
Asset Value * Exposure Factor
4
Review the scenario and determine the ALE
$10,000
$13,298
$9,800
$11,000
5
HIPAA regulations apply to all businesses that deal with health-related data, regardless of their size or industry.
True
False
6
An example of a logical control does not include which of the following:
IDS
Encryption
Policies
Firewalls
7
On average, how long are tactical plans?
1 to 3 months
3 weeks or less
4,5,6 years
1 year
8
The principle that ensures each user should have the most restrictive permissions to perform their tasks is known as:
Role-based access
Separation of duties
Least privilege
Need to know
9
What's the purpose of security awareness?
To reduce data flow
To engage USERS in security practices
To identify vulnerabilities
To gain hackers knowledge
10
Which of the following is NOT a primary goal of the HIPAA
Protect health data integrity
Promote the use of health apps
Ensure availability of health data
Safeguard health data confidentiality
11
Which of below is an example of a security control?
Training
Policy
Process
Backup
12
Which of the following is the weakest element in any security solution?
Security policies
Internet connections
Software products
People
13
What is the first step in the risk management process?
Risk identification
Risk treatment
Risk assessment
Risk communication
14
What does CIA stand for? Select all the applicable options
Confidentiality
Accountability
Integrity
Availability
15
PCI DSS requirements, apply to companies that store cardholder data only.
True
False
16
Read the scenario and select the correct answer
ISO 27001
PCI DSS
NIST
HIPAA
17
Which of the following is not a valid response to risk?
Transfer
Avoid
Mitigate
Neglect
18
Which of the following best describes 'due care' in information security?
Following standard security practices
Maintaining insurance for cybersecurity events
Achieving security certification for a product
Implementing security based on a written contract
19
What is the second step in the risk management process?
Risk identification
Risk treatment
Risk analysis
Risk assessment
20
On average, how long are Strategic Plans? LRP
4,5,6 years or more
3 weeks or less
1 year
1 to 3 months
21
Who is ultimately responsible for making sure data is classified and protected?
Data User
Data owner
Data custodian
Data Administrators
22
For the CISSP EXAM, which of below is not a type of risk?
Operational Risk
Vendor Risk
Execution Risk
Business Risk
