Preparing for BCS Foundation Certificate in Information Security Management Principles V9.0 Exam? Passcert provides you CISMP-V9 Exam Dumps and high-quality reference information for you to participate in the CISMP-V9 exam. Passcert CISMP-V9 Exam Dumps are based on the research of CISMP-V9 examination Outline. Therefore, the high quality and high authoritative CISMP-V9 Exam Dumps provided by Passcert can definitely do our best to help you pass BCS CISMP-V9 exam. Passcert will continue to update the information about CISMP-V9 exam to meet your need.

This certificate covers the range of concepts, approaches and techniques that are applicable to the BCS Foundation Certificate in Information Security Management Principles. Candidates are required to demonstrate their knowledge and understanding of these aspects, as specified in the learning objectives provided.

The certificate is relevant to anyone requiring an understanding of the BCS Foundation Certificate in Information Security Management Principles including those who have information security responsibilities as part of their day to day role, or who are thinking of moving into an information security or related function. It also provides the opportunity for those already within these roles to enhance or refresh their knowledge and in the process gain a qualification, recognised by industry, which demonstrates the level of knowledge gained.

The certificate is relevant to anyone requiring an understanding of Information Security Management Principles as well as those with an interest in information security either as a potential career or as an additional part of their general business knowledge. It is very much a firm foundation on which other qualifications can be built or which provides a thorough general understanding to enable organisations to begin to ensure their information is protected appropriately.

1. Which of the following is NOT an accepted classification of security controls?

A. Nominative.

B. Preventive.

C. Detective.

D. Corrective.

Answer : A

2. Which three of the following characteristics form the AAA Triad in Information Security?

1. Authentication

2. Availability

3. Accounting

4. Asymmetry

5. Authorisation

A. 1, 2 and 3.

B. 2, 4, and 5.

C. 1, 3 and 4.

D. 1, 3 and 5.

Answer : D

3. According to ISO/IEC 27000, which of the following is the definition of a vulnerability?

A. A weakness of an asset or group of assets that can be exploited by one or more threats.

B. The impact of a cyber attack on an asset or group of assets.

C. The threat that an asset or group of assets may be damaged by an exploit.

D. The damage that has been caused by a weakness iin a system.

Answer : A

4. Which term describes the acknowledgement and acceptance of ownership of actions, decisions, policies and deliverables?

A. Accountability.

B. Responsibility.

C. Credibility.

D. Confidentiality.

Answer : A

5. Which security concept provides redundancy in the event a security control failure or the exploitation of a vulnerability?

A. System Integrity.

B. Sandboxing.

C. Intrusion Prevention System.

D. Defence in depth.

Answer : D