Confidently Practice Online with Free CISMP-V9 Exam Cram

Practice your BCS Foundation Certificate in Information Security Management Principles V9.0 certification test with free CISMP-V9 exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CISMP-V9 exam dumps, verified questions, and expert-designed free online practice tests. Moreover our BCS CISMP-V9 exam cram backed by our confidence-boosting refund guarantee.

Question 1

What type of diagram used in application threat modeling includes malicious users as well as descriptions like mitigates and threatens?

Options :

A : Threat trees.

B : STRIDE charts.

C : Misuse case diagrams.

D : DREAD diagrams.

Answer: A

Question 2

What term refers to the shared set of values within an organisation that determine how people are expected to behave in regard to information security?

Options :

A : Code of Ethics.

B : Security Culture.

C : System Operating Procedures.

D : Security Policy Framework.

Answer: B

Question 3

What Is the root cause as to why SMS messages are open to attackers and abuse?

Options :

A : The store and forward nature of SMS means it is considered a 'fire and forget service'.

B : SMS technology was never intended to be used to transmit high risk content such as One-time payment codes.

C : The vast majority of mobile phones globally support the SMS protocol inexpensively.

D : There are only two mobile phone platforms - Android and iOS - reducing the number of target environments.

Answer: B

Question 4

Which of the following is the MOST important reason for undertaking Continual Professional Development (CPD) within the Information Security sphere?

Options :

A : Professional qualification bodies demand CPD.

B : Information Security changes constantly and at speed.

C : IT certifications require CPD and Security needs to remain credible.

D : CPD is a prerequisite of any Chartered Institution qualification.

Answer: B

Question 5

Which of the following is a framework and methodology for Enterprise Security Architecture and Service Management?

Options :

A : TOGAF

B : SABSA

C : PCI DSS.

D : OWASP.

Answer: B