Free Access to ISC.CSSLP.v2023-02-09.q213 with Valid Practice Test (Page 40)

Question 191

In which of the following deployment models of cloud is the cloud infrastructure operated exclusively for an organization?

A.Public cloud
B.Community cloud
C.Private cloud
D.Hybrid cloud

Question 192

Which of the following scanning techniques helps to ensure that the standard software configuration is currently with the latest security patches and software, and helps to locate uncontrolled or unauthorized software?

A.Port Scanning
B.Discovery Scanning
C.Server Scanning
D.Workstation Scanning

Question 193

Which of the following components of configuration management involves periodic checks to determine the consistency and completeness of accounting information and to verify that all configuration management policies are being followed?

A.Configuration Identification
B.Configuration Auditing
C.Configuration Control
D.Configuration Status Accounting

Correct Answer: B

Explanation/Reference:
Explanation: Configuration auditing is a component of configuration management, which involves periodic checks to establish the consistency and completeness of accounting information and to confirm that all configuration management policies are being followed. Configuration audits are broken into functional and physical configuration audits. They occur either at delivery or at the moment of effecting the change. A functional configuration audit ensures that functional and performance attributes of a configuration item are achieved, while a physical configuration audit ensures that a configuration item is installed in accordance with the requirements of its detailed design documentation. AnswerD is incorrect. The configuration status accounting procedure is the ability to record and report on the configuration baselines associated with each configuration item at any moment of time. It supports the functional and physical attributes of software at various points in time, and performs systematic control of accounting to the identified attributes for the purpose of maintaining software integrity and traceability throughout the software development life cycle. AnswerC is incorrect. Configuration control is a procedure of the Configuration management.
Configuration control is a set of processes and approval stages required to change a configuration item's attributes and to re-baseline them. It supports the change of the functional and physical attributes of software at various points in time, and performs systematic control of changes to the identified attributes.
AnswerA is incorrect. Configuration identification is the process of identifying the attributes that define
every aspect of a configuration item. A configuration item is a product (hardware and/or software) that has an end-user purpose. These attributes are recorded in configuration documentation and baselined.
Baselining an attribute forces formal configuration change control processes to be effected in the event that these attributes are changed.

Question 194

The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly given to the most senior executive in an enterprise. What are the responsibilities of a Chief Information Officer?
Each correct answer represents a complete solution. Choose all that apply.

A.Facilitating the sharing of security risk-related information among authorizing officials
B.Preserving high-level communications and working group relationships in an organization
C.Establishing effective continuous monitoring program for the organization
D.Proposing the information technology needed by an enterprise to achieve its goals and then working within a budget to implement the plan

Question 195

You are the project manager of QSL project for your organization. You are working with your project team and several key stakeholders to create a diagram that shows how various elements of a system interrelate and the mechanism of causation within the system. What diagramming technique are you using as a part of the risk identification process?

A.Cause and effect diagrams
B.Influence diagrams
C.Predecessor and successor diagramming
D.System or process flowcharts

Question 191

Question 192

Question 193

Question 194

Question 195

Download PDF File