ISC2 ISSMP Exam - Topic 4 Question 74 Discussion

Actual exam question for ISC2's ISSMP exam

Question #: 74
Topic #: 4

Which of the following processes will you involve to perform the active analysis of the system for any potential vulnerabilities that may result from poor or improper system configuration, known and/or unknown hardware or software flaws, or operational weaknesses in process or technical countermeasures?

APenetration testing

BRisk analysis

CBaselining

DCompliance checking

Show Suggested Answer

Suggested Answer: C

Monitoring the computer hard disks or e-mails of employees pertains to the privacy policy of an organization.

Answer option B is incorrect. The backup policy of a company is related to the backup of its data.

Answer option A is incorrect. The network security policy is related to the security of a company's network.

Answer option D is incorrect. The user password policy is related to passwords that users provide to log on to the network.

by Lawrence at Oct 16, 2023, 11:24 AM

Limited Time Offer

25%

Off

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lauran

8 months ago

Wait, can you really find unknown flaws with just these methods?

upvoted 0 times

...

Aliza

8 months ago

Baselining helps, but it feels a bit basic for vulnerabilities.

upvoted 0 times

...

Melvin

8 months ago

Compliance checking? Not sure that's enough on its own.

upvoted 0 times

...

Luke

8 months ago

I think risk analysis is super important too.

upvoted 0 times

...

Albert

8 months ago

Definitely penetration testing is key!

upvoted 0 times

...

Cristina

9 months ago

Compliance checking seems important, but I wonder if it really involves active analysis or just ensures standards are met.

upvoted 0 times

...

Herminia

9 months ago

Baselining sounds familiar, but I can't recall if it directly addresses vulnerabilities like the question asks.

upvoted 0 times

...

Tracie

9 months ago

I remember practicing risk analysis questions, and it seems like that could also help identify weaknesses, but it feels more theoretical.

upvoted 0 times

...

Haydee

9 months ago

I think penetration testing might be the right choice since it actively seeks out vulnerabilities, but I'm not entirely sure.

upvoted 0 times

...

Bulah

9 months ago

Hmm, this is a tricky one. I'm not entirely sure if penetration testing is the only valid answer, or if something like risk analysis or compliance checking could also be appropriate. I'll need to review my notes and think through the differences between these approaches.

upvoted 0 times

...

Dorothea

9 months ago

Penetration testing sounds like the right answer here. It's a comprehensive approach to actively assess the system for any vulnerabilities, whether they're from configuration issues, software flaws, or operational weaknesses. I'm confident this is the best choice.

upvoted 0 times

...

Lizbeth

9 months ago

I'm a bit unsure about this one. Is penetration testing the only option, or are there other processes like risk analysis or compliance checking that could also be used? I'll need to think this through carefully.

upvoted 0 times

...

Emiko

9 months ago

This question is asking about the process to actively analyze a system for potential vulnerabilities. I think the best approach would be penetration testing, which involves simulating attacks to identify weaknesses.

upvoted 0 times

...

Brandon

9 months ago

Okay, let's see. I think options B and D might be the right answers here, since they seem to involve limitations on modifying active orders.

upvoted 0 times

...

Tuyet

9 months ago

Hmm, I'm a little confused on the difference between a multiple probe and multiple baseline design. I'll have to review my notes to make sure I understand the key features of each.

upvoted 0 times

...

Wei

9 months ago

I feel confident about this one. The key is to properly configure the field security and then publish the changes to make them effective. I'll double-check my work, but I think I've got a good strategy for tackling this.

upvoted 0 times

...

Francine

10 months ago

Ah, I remember learning about this in class. The netsh command is definitely the one used for network protocol configuration.

upvoted 0 times

...

Cristal

1 year ago

I'm going with E) Hiring a squad of ninjas to guard the system. That'll keep those pesky vulnerabilities at bay, am I right? Or maybe I'll just ask my grandma to watch over it, she's pretty good at keeping things secure.

upvoted 0 times

...

Rosenda

1 year ago

Trick question, it's actually all of the above! You gotta go for the full cybersecurity package, you know? Penetration testing, risk analysis, baselining, compliance checking - the whole nine yards.

upvoted 0 times

...

Meghan

1 year ago

Oh, I know this one! It's D) Compliance checking. Gotta make sure we're following all the rules and regulations, right? Wouldn't want the cybersecurity police to come knocking on our door.

upvoted 0 times

Arlette

1 year ago

Actually, I think it might be C) Baselining. We need to establish a baseline to compare against potential vulnerabilities.

upvoted 0 times

...

Alyce

1 year ago

I agree with the original comment, it's D) Compliance checking. We need to make sure we're following all the rules.

upvoted 0 times

...

Margart

1 year ago

No, I'm pretty sure it's B) Risk analysis. We need to assess potential vulnerabilities.

upvoted 0 times

...

Royce

1 year ago

Cora: No problem! It's important to stay proactive in identifying and addressing potential vulnerabilities.

upvoted 0 times

...

Cora

1 year ago

User 2: Oh, I see. So it's about actively testing the system's defenses. Thanks for clarifying!

upvoted 0 times

...

Loren

1 year ago

I think it's actually A) Penetration testing. We need to actively test for vulnerabilities.

upvoted 0 times

...

Nina

1 year ago

User 1: Actually, the correct answer is A) Penetration testing. It involves actively trying to exploit vulnerabilities in the system.

upvoted 0 times

...

Blair

1 year ago

Hmm, this one's tricky. I'd say B) Risk analysis is the way to go. Gotta assess those vulnerabilities, you know? Wouldn't want any nasty surprises down the line.

upvoted 0 times

An

1 year ago

User 3: I agree with the original comment, B) Risk analysis is crucial to assess potential vulnerabilities.

upvoted 0 times

...

Marguerita

1 year ago

User 2: I disagree, I believe C) Baselining is the best approach to identify vulnerabilities.

upvoted 0 times

...

Chau

1 year ago

User 1: I think A) Penetration testing is more effective for active analysis.

upvoted 0 times

...

Aja

1 year ago

Ah, the classic 'which one is the correct answer?' dilemma. I'm going to have to go with A) Penetration testing. Gotta love a good ethical hacking session, am I right?

upvoted 0 times