Chapter 15th CISSP presentation quiz

What are the two types of audits?

• Public and private audits

• Operational and technical audits

• Internal and external audits

• independent and dependent audits

The three main components of building a security assessment and testing program are: security tests, security assessments and security audits.

• True

• False

Which option is one of the most common techniques used for Network Discovery Scanning?

• Xmas Scanning

• TCP AZX Scanning

• TCP SYR Scanning

• TCP KCA Scanning

What is one characteristic of Network Vulnerability Scanning?

• Scans a range of IP addresses

• Needs to be performed on recurring basis

• Only cybersecurity professionals can execute it

• Contains Data Bases with thousands of known vulnerabilities

Select 2 steps performed in penetration testing.

• Manual probing and attack attempts

• SQL Injections

• Network vulnerability scans

• Directory Traversal

6.    Which is the third step when Fagan Inspections are made in code review?

• Inspection

• Preparation

• Rework

• Overwiew

Which three types of interfaces should be tested during “Interface testing”?

• Application Programming Interface, voice interface, user interface

• User interface, command line interface, web interface

• User interface, application programming interface, physical interface

• Application programming interface, touch screen interface, remote control interface

Which type of software testing evaluates its security without running it?

• Dynamic testing

• Static testing

• Interface testing

• Fuzz testing

What information security management task ensures that the organization’s data protection requirements are met effectively?

• Account management

• Backup verification

• Log review

• Key performance indicators

Is the main focus of SIEM on managing performance and risk indicators for information security programs?

• True

• False