Loading demo links...
Showing 1–15 of 15 questions
SIMULATION
Fill in the blank with an appropriate phrase.________ models address specifications, requirements, and design, verification and validation, and maintenance activities.
Answer is in the explanation below.
Which of the following are the levels of military data classification system? Each correct answer represents a complete solution. Choose all that apply.
Select all that apply, then click Submit answer.
Sensitive
Top Secret
Confidential
Secret
Unclassified
Public
Which of the following methods can be helpful to eliminate social engineering threat? Each correct answer represents a complete solution. Choose three.
Select all that apply, then click Submit answer.
Password policies
Vulnerability assessments
Data encryption
Data classification
Which of the following are examples of administrative controls that involve all levels of employees within an organization and determine which users have access to what resources and information? Each correct answer represents a complete solution. Choose three.
Select all that apply, then click Submit answer.
Employee registration and accounting
Disaster preparedness and recovery plans
Network authentication
Training and awareness
Encryption
Which of the following subphases are defined in the maintenance phase of the life cycle models?
Select all that apply, then click Submit answer.
Change control
Configuration control
Request control
Release control
Which of the following types of activities can be audited for security? Each correct answer represents a complete solution. Choose three.
Select all that apply, then click Submit answer.
Data downloading from the Internet
File and object access
Network logons and logoffs
Printer access
Which of the following sections come under the ISO/IEC 27002 standard?
Select all that apply, then click Submit answer.
Financial assessment
Asset management
Security policy
Risk assessment
What are the purposes of audit records on an information system? Each correct answer represents a complete solution. Choose two.
Select all that apply, then click Submit answer.
Troubleshooting
Investigation
Upgradation
Backup
Which of the following sites are similar to the hot site facilities, with the exception that they are completely dedicated, self-developed recovery facilities?
Select an option, then click Submit answer.
Cold sites
Orange sites
Warm sites
Duplicate processing facilities
Which of the following is a name, symbol, or slogan with which a product is identified?
Select an option, then click Submit answer.
Copyright
Trademark
Trade secret
Patent
Which of the following contract types is described in the statement below? "This contract type provides no incentive for the contractor to control costs and hence is rarely utilized."
Select an option, then click Submit answer.
Cost Plus Fixed Fee
Cost Plus Percentage of Cost
Cost Plus Incentive Fee
Cost Plus Award Fee
You are the project manager of the HJK Project for your organization. You and the project team have created risk responses for many of the risk events in the project. Where should you document the proposed responses and the current status of all identified risks?
Select an option, then click Submit answer.
Risk management plan
Lessons learned documentation
Risk register
Stakeholder management strategy
Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like for you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart?
Select an option, then click Submit answer.
Quantitative analysis
Contingency reserve
Risk response
Risk response plan
You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to work from an alternate location. However, budget is an issue. Which of the following is most appropriate for this client?
Select an option, then click Submit answer.
Cold site
Off site
Hot site
Warm site
You work as the project manager for Bluewell Inc. You are working on NGQQ Project for your company. You have completed the risk analysis processes for the risk events. You and the project team have created risk responses for most of the identified project risks. Which of the following risk response planning techniques will you use to shift the impact of a threat to a third party, together with the responses?
Select an option, then click Submit answer.
Risk mitigation
Risk acceptance
Risk avoidance
Risk transference
This page holds a free practice test for the Information Systems Security Management Professional (CISSP-ISSMP) certification from ISC2. You will find 15 free questions, drawn from the full Study4Pass practice set of 218 questions for this exam. The free sample includes 7 single-answer, 7 multiple-answer and 1 hands-on lab questions — the same mix of formats you will meet in the full set. The questions follow the same topic balance as the real exam: Security Governance and Risk Management, Security Program Management, Security Architecture and Design and Security Operations. The ISC CISSP-ISSMP (Information Systems Security Management Professional) is an advanced certification for professionals who have achieved the CISSP (Certified Information Systems Security Professional) certification and wish to demonstrate their expertise in the field…
The primary target audience for the ISC CISSP-ISSMP Exam is IT security professionals who are looking to demonstrate their expertise in information security management. The Prerequisites for the ISC CISSP-ISSMP Exam are: • A valid CISSP Certification • 5 years of cumulative, paid professional work experience in two or more of the ISSMP domains…
Use the sample the way you would use the real thing: answer each question on your own first, then open the explanation and make sure you understand why the right answer is right. That habit — reasoning instead of memorizing — is what carries over to exam day. When a topic keeps tripping you up, that is your study plan telling you where to go next.
When you finish the sample, do not just count the score — read it. Every missed question names a topic, and the full set lets you train that topic on its own until it stops costing you marks. That loop of test, review and targeted practice is how this set is designed to be used, from the first free question to the last simulation.
Inside the full CISSP-ISSMP practice set:
Pick an answer for each question and check it straight away — the correct answer and a full explanation appear under the question. There is no time limit and nothing to sign up for. When an explanation is not enough, use Ask AI: this is an AI-Enabled practice test, and Ask AI explains the concept behind the question in plain language. Ready for more? The full 218-question set adds a timed Exam Simulation mode, topic training for your weak areas, and a flagged-question review, so you can practise the way the real exam feels.
Yes — the 15 questions on this page are completely free, with no signup and no payment details needed.
218 questions. The 15 free questions above are a sample of that full set, in the same style and topic balance.
Yes — every question shows the correct answer with an explanation, and Ask AI can explain the concept behind a question in plain words if you want to go deeper.
No. This is a practice test: the questions are written to mirror the real CISSP-ISSMP exam’s topics and difficulty, not copied from it.