6.3 - Collect Security Process Data (e.g., Technical and Administrative) CISSP Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is an example of backup verification data?

   • ANames of backup administrators
   • BLogs from a test restore of a backup
   • CCost of backup software licenses
   • DList of backup tape storage locations
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following documents would be most relevant as evidence of management approval for an access request?

   • AA signed authorization form from the data owner
   • BA list of firewall rules
   • CA password policy document
   • DA network diagram showing system connections
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company conducts an annual disaster recovery (DR) test. The test plan includes restoring the customer relationship management (CRM) system. The DR team successfully restored the system, but the data was from a backup that was 12 hours old. The business had set a recovery point objective (RPO) of 4 hours. What should the DR team report?

   • AThe test was successful because the system was restored
   • BThe test was partially successful because the system was restored but the RPO was not met
   • CThe test was unsuccessful because the RTO was not met
   • DThe test was unsuccessful because the RPO was not met
   Reveal Solution Discussion Select an answer first
5. 34expert · medium

   A security auditor is reviewing the account management process and wants to ensure that access privileges are reviewed periodically and that any changes are approved. Which data would provide the MOST comprehensive evidence for this audit?

   • AAccess review reports and change approval records from the identity management system
   • BAccount creation and deletion logs from the identity management system
   • CSecurity incident reports related to unauthorized access
   • DAuthentication logs showing user logins
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security awareness program includes a new module on phishing. The training team wants to measure whether the module is effective in improving employees' ability to identify phishing emails. Which data collection method would provide the MOST direct evidence of this?

   • AConducting a simulated phishing campaign and tracking the click rate before and after the module
   • BCollecting the scores from a quiz at the end of the module
   • CSurveying employees about their confidence in identifying phishing emails
   • DCollecting the completion rate of the new module
   Reveal Solution Discussion Select an answer first