Free Access to ISC.CSSLP.v2023-02-09.q213 with Valid Practice Test (Page 27)

Question 126

Software Development Life Cycle (SDLC) is a logical process used by programmers to develop software. Which of the following SDLC phases meets the audit objectives defined below: System and data are validated. System meets all user requirements. System meets all control requirements.

A.Evaluation and acceptance
B.Programming and training
C.Definition
D.Initiation

Question 127

Martha works as a Project Leader for BlueWell Inc. She and her team have developed accounting software. The software was performing well. Recently, the software has been modified. The users of this software are now complaining about the software not working properly. Which of the following actions will she take to test the software?

A.Perform integration testing
B.Perform regression testing
C.Perform unit testing
D.Perform acceptance testing

Question 128

Which of the following techniques is used when a system performs the penetration testing with the objective of accessing unauthorized information residing inside a computer?

A.Biometrician
B.Van Eck Phreaking
C.Port scanning
D.Phreaking

Question 129

Which of the following plans is designed to protect critical business processes from natural or man-made failures or disasters and the resultant loss of capital due to the unavailability of normal business processes?

A.Contingency plan
B.Business continuity plan
C.Crisis communication plan
D.Disaster recovery plan

Correct Answer: B

The business continuity plan is designed to protect critical business processes from natural or man-made failures or disasters and the resultant loss of capital due to the unavailability of normal business processes. Business Continuity Planning (BCP) is the creation and validation of a practiced logistical plan for how an organization will recover and restore partially or completely interrupted critical (urgent) functions within a predetermined time after a disaster or extended disruption. The logistical plan is called a business continuity plan. Answer C is incorrect. The crisis communication plan can be broadly defined as the plan for the exchange of information before, during, or after a crisis event. It is considered as a sub-specialty of the public relations profession that is designed to protect and defend an individual, company, or organization facing a public challenge to its reputation. The aim of crisis communication plan is to assist organizations to achieve continuity of critical business processes and information flows under crisis, disaster or event driven circumstances. Answer A is incorrect. A contingency plan is a plan devised for a specific situation when things could go wrong. Contingency plans are often devised by governments or businesses who want to be prepared for anything that could happen. Contingency plans include specific strategies and actions to deal with specific variances to assumptions resulting in a particular problem, emergency, or state of affairs. They also include a monitoring process and "triggers" for initiating planned actions. They are required to help governments, businesses, or individuals to recover from serious incidents in the minimum time with minimum cost and disruption. Answer D is incorrect. A disaster recovery plan should contain data, hardware, and software that can be critical for a business. It should also include the plan for sudden loss such as hard disc crash. The business should use backup and data recovery utilities to limit the loss of data.

Question 130

Which of the following statements about the authentication concept of information security management is true?

A.It establishes the users' identity and ensures that the users are who they say they are.
B.It ensures the reliable and timely access to resources.
C.It determines the actions and behaviors of a single individual within a system, and identifies that particular individual.
D.It ensures that modifications are not made to data by unauthorized personnel or processes.

Question 126

Question 127

Question 128

Question 129

Question 130

Download PDF File