RCR 091: CISSP Exam Questions for Risk Management – CISSP Training and Study!

Published: April 11, 2020, 5 p.m.

Shon Gerber from ShonGerber.com provides you the information and knowledge you need to prepare and pass the CISSP Exam while providing the tools you need to enhance your cybersecurity career.  Shon utilizes his expansive knowledge while providing superior training from his years of training people in cybersecurity.   

Shon will provide CISSP training and study around the tools you need to better understand what you need to know to be better prepared for the CISSP Exam Questions.  His knowledge will provide the skills needed to pass the CISSP Exam.  

BTW - Get access to all my Free Content and CISSP Training Courses here at:  https://shongerber.com/  

Available Courses:   

CISSP Exam Questions 

Question:  156 

If a security mechanism offers availability, then it offers a high level of assurance that authorized subjects can _________ the data, objects, and resources. 

A) Control 

B) Audit 

C) Access 

D) Repudiate 

 

Access 

 

Accessibility of data, objects, and resources is the goal of availability. If a security mechanism offers availability, then it is highly likely that the data, objects, and resources are accessible to authorized subjects. 

------------------------------------ 

Question:  157 

All but which of the following items require awareness for all individuals affected? 

A) Restricting personal email 

B) Recording phone conversations 

C) Gathering information about surfing habits 

D) The backup mechanism used to retain email messages 

 

The backup mechanism used to retain email messages 

 

Users should be aware that email messages are retained, but the backup mechanism used to perform this operation does not need to be disclosed to them. 

------------------------------------ 

Question:  158 

Which of the following statements is not true? 

A) IT security can provide protection only against logical or technical attacks. 

B) The process by which the goals of risk management are achieved is known as risk analysis. 

C) Risks to an IT infrastructure are all computer based. 

D) An asset is anything used in a business process or task. 

 

Risks to an IT infrastructure are all computer based. 

 

Risks to an IT infrastructure are not all computer based. In fact, many risks come from noncomputer sources. It is important to consider all possible risks when performing risk evaluation for an organization. Failing to properly evaluate and respond to all forms of risk, a company remains vulnerable. 

 

Want to find Shon elsewhere on the internet? 

LINKS: