ISC2 ISSMP Exam - Topic 1 Question 64 Discussion

Actual exam question for ISC2's ISSMP exam

Question #: 64
Topic #: 1

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program. What will be your answer?

AIt improves the possibility for career advancement of the IT staff.

BIt improves the security of vendor relations.

CIt improves the performance of a company's intranet.

DIt improves awareness of the need to protect system resources.

Show Suggested Answer

Suggested Answer: B, D

The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.

The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system.

Answer option C is incorrect. The Bell-LaPadula access control model is mainly used in military systems.

Answer option A is incorrect. There is no such access control model as Clark-Biba.

by Joesph at Feb 27, 2023, 08:23 AM

Limited Time Offer

25%

Off

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephane

5 months ago

Really? Does it actually make a difference?

upvoted 0 times

...

Fannie

5 months ago

It helps everyone understand their role in security.

upvoted 0 times

...

Keneth

6 months ago

Wait, I thought it was just for IT staff?

upvoted 0 times

...

Kina

6 months ago

Totally agree, we need to be vigilant.

upvoted 0 times

...

Kerry

6 months ago

It's all about protecting our data!

upvoted 0 times

...

Leatha

6 months ago

I vaguely recall that security training is about more than just awareness; it also involves educating employees on specific threats, but I can't pinpoint the exact wording.

upvoted 0 times

...

Alana

6 months ago

I feel like option D makes the most sense since it directly addresses the need to protect system resources, but I could be wrong.

upvoted 0 times

...

Isaiah

6 months ago

I remember practicing a similar question, and I believe the focus should be on improving awareness about security risks and how to mitigate them.

upvoted 0 times

...

Isadora

6 months ago

I think the main goal of security awareness training is to help employees understand the importance of protecting company resources, but I'm not entirely sure if that's the best answer here.

upvoted 0 times

...

Trevor

6 months ago

Okay, let me see. I remember learning that the edge of the cell should be around -67 dBm for good voice quality. I think that's option A, but I'll double-check the other choices just to be sure.

upvoted 0 times

...

Malinda

6 months ago

Vulnerability seems like the obvious choice for building Vulnerability Groups, so I'm going to rule that out first.

upvoted 0 times

...

Peggie

6 months ago

This seems straightforward to me. The error message indicates a credential retrieval issue, so the change needs to be made on the server side of the database that the link is connecting to, which is server B.

upvoted 0 times

...

Shizue

6 months ago

I've got this one. The answer is B - Terrorism. The question is describing the textbook definition of terrorism, so that's the clear correct choice.

upvoted 0 times

...

Maile

6 months ago

I believe the way to calculate it involves using the binomial distribution, but I'm a bit shaky on the details.

upvoted 0 times

...

Willis

12 months ago

Wow, I didn't realize security awareness training could be so exciting! Guess I'll be on the lookout for any hackers trying to breach the system during my lunch break.

upvoted 0 times

Youlanda

10 months ago

B) It improves the security of vendor relations.

upvoted 0 times

...

Lorita

10 months ago

A) It improves the possibility for career advancement of the IT staff.

upvoted 0 times

...

Angella

10 months ago

D) It improves awareness of the need to protect system resources.

upvoted 0 times

...

Ernest

10 months ago

B) It improves the security of vendor relations.

upvoted 0 times

...

Blythe

11 months ago

A) It improves the possibility for career advancement of the IT staff.

upvoted 0 times

...

Lai

11 months ago

D) It improves awareness of the need to protect system resources.

upvoted 0 times

...

Latanya

12 months ago

That makes sense, it's important to keep our systems secure.

upvoted 0 times

...

Myrtie

12 months ago

It improves awareness of the need to protect system resources.

upvoted 0 times

...

Latanya

12 months ago

Why do we have a security awareness program?

upvoted 0 times

...

Armando

12 months ago

Option D definitely makes the most sense. You can't have a secure environment without informed and engaged employees.

upvoted 0 times

Trinidad

11 months ago

Option D definitely makes the most sense. You can't have a secure environment without informed and engaged employees.

upvoted 0 times

...

Leota

11 months ago

D) It improves awareness of the need to protect system resources.

upvoted 0 times

...

Melissa

1 year ago

Ha! I bet some employees think this training is just a way for the management to keep an eye on them. But hey, gotta do what you gotta do to keep the system safe, right?

upvoted 0 times

Aleta

11 months ago

B) It improves the security of vendor relations.

upvoted 0 times

...

Cyril

11 months ago

A) It improves the possibility for career advancement of the IT staff.

upvoted 0 times

...

Gwen

11 months ago

D) It improves awareness of the need to protect system resources.

upvoted 0 times

...

Caitlin

1 year ago

I agree, D is the right answer. Improving security awareness is essential for the overall security of the organization.

upvoted 0 times

...

Stevie

1 year ago

The correct answer is D. Security awareness training is crucial for employees to understand the importance of protecting company resources and sensitive information.

upvoted 0 times

...