Free ISC CSSLP Exam Dumps Questions & Answers

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?

• A.  Configuration Verification and Auditing
• B.  Configuration Status Accounting
• C.  Configuration Identification
• D.  Configuration Item Costing

Which of the following ISO standards is entitled as "Information technology - Security techniques Information security management - Measurement"?

• A.  ISO 27005
• B.  ISO 27006
• C.  ISO 27004
• D.  ISO 27003

Which of the following penetration testing techniques automatically tests every phone line in an exchange and tries to locate modems that are attached to the network?

• A.  Dumpster diving
• B.  Social engineering
• C.  Demon dialing
• D.  Sniffing

In which of the following testing methods is the test engineer equipped with the knowledge of system and designs test cases or test data based on system knowledge?

• A.  Graybox testing
• B.  Integration testing
• C.  Regression testing
• D.  Whitebox testing

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

• A.  Man-in-the-middle attack
• B.  Denial-of-service attack
• C.  Dictionary attack
• D.  Password guessing attack