Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 SSCP Exam - Topic 10 Question 95 Discussion

Posted by Gary on Aug 05, 2024 at 01:26 AM

Out of the steps listed below, which one is not one of the steps conducted during the Business Impact Analysis (BIA)?

Suggested Answer: C

A trojan horse is any code that appears to have some useful purpose but also contains code that has a malicious or harmful purpose imbedded in it. A Trojan often also includes a trapdoor as a means to gain access to a computer system bypassing security controls.

Wikipedia defines it as:

A Trojan horse, or Trojan, in computing is a non-self-replicating type of malware program containing malicious code that, when executed, carries out actions determined by the nature of the Trojan, typically causing loss or theft of data, and possible system harm. The term is derived from the story of the wooden horse used to trick defenders of Troy into taking concealed warriors into their city in ancient Greece, because computer Trojans often employ a form of social engineering, presenting themselves as routine, useful, or interesting in order to persuade victims to install them on their computers.

The following answers are incorrect:

virus. Is incorrect because a Virus is a malicious program and is does not appear to be harmless, it's sole purpose is malicious intent often doing damage to a system. A computer virus is a type of malware that, when executed, replicates by inserting copies of itself (possibly modified) into other computer programs, data files, or the boot sector of the hard drive; when this replication succeeds, the affected areas are then said to be 'infected'.

worm. Is incorrect because a Worm is similiar to a Virus but does not require user intervention to execute. Rather than doing damage to the system, worms tend to self-propagate and devour the resources of a system. A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers. Often, it uses a computer network to spread itself, relying on security failures on the target computer to access it. Unlike a computer virus, it does not need to attach itself to an existing program. Worms almost always cause at least some harm to the network, even if only by consuming bandwidth, whereas viruses almost always corrupt or modify files on a targeted computer.

trapdoor. Is incorrect because a trapdoor is a means to bypass security by hiding an entry point into a system. Trojan Horses often have a trapdoor imbedded in them.

References:

http://en.wikipedia.org/wiki/Trojan_horse_%28computing%29

and

http://en.wikipedia.org/wiki/Computer_virus

and

http://en.wikipedia.org/wiki/Computer_worm

and

http://en.wikipedia.org/wiki/Backdoor_%28computing%29


Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
35 comments · newest first
RU
Rueben 10 months ago
Yup, it's all about critical functions and data techniques!
CA
Carin 11 months ago
Wait, are we sure about that? Seems off.
KA
Katina 11 months ago
I thought selecting interviewees was part of it?
LI
Linwood 11 months ago
Totally agree, it's about identifying functions, not sites.
LA
Laine 11 months ago
Alternate site selection is not part of BIA.
SE
Serita 12 months ago
Identifying critical business functions definitely seems like a core part of BIA, but I can't recall if creating data-gathering techniques is included.
MA
Malcolm 12 months ago
Selecting individuals to interview sounds like a step in the BIA process, but I could be mixing it up with other assessments.
LE
Leandro 12 months ago
I'm not entirely sure, but I remember something about data-gathering techniques being important for BIA.
EV
Eveline 1 year ago
I think the alternate site selection is more related to disaster recovery planning, not BIA.
GI
Gilberto 1 year ago
I've got a good handle on the BIA process, so I think I can eliminate the odd one out here. Alternate site selection sounds like it's not part of the core BIA steps.
JO
Josphine 1 year ago
I'm a bit confused on this one. The steps all seem related to a BIA, but I'll have to double-check my notes to be sure.
AR
Arminda 1 year ago
Hmm, this one's tricky. I'll need to think carefully about the steps involved in a BIA.
TH
Thora 1 year ago
Okay, let's see. Alternate site selection seems like it might be a different process, not part of the BIA itself.
LY
Lyla 1 year ago
Resynchronizing the relationship sounds like the right move here. I'll make sure to read the question and exhibit carefully before submitting my answer.
SE
Serina 1 year ago
I'm confident the answer is A) Alternate site selection. The BIA is like a business health check, not a real estate hunt.
VI
Vivienne 1 year ago
Easy peasy, it's gotta be A) Alternate site selection. The BIA is about understanding the business, not finding backup locations. Unless, of course, the business is a circus, then alternate site selection would be top priority!
FR
Francesco 1 year ago
↳ replying to Vivienne
Alternate site selection would be more relevant for the Business Continuity Planning phase.
RE
Ressie 1 year ago
↳ replying to Vivienne
Definitely, the focus is on identifying critical business functions and gathering data.
CH
Cherilyn 1 year ago
↳ replying to Vivienne
I think you're right, A) Alternate site selection is not part of the BIA process.
MA
Mary 1 year ago
Hmm, I'm leaning towards D) Select individuals to interview for data gathering. That seems like a key step in the BIA process to me.
BR
Brunilda 1 year ago
↳ replying to Mary
Oh, I see. Thanks for clarifying. I'll keep that in mind for future reference.
FA
Fabiola 1 year ago
↳ replying to Mary
No, that's not correct. The step that is not conducted during the BIA is A) Alternate site selection.
BE
Beata 1 year ago
↳ replying to Mary
I think D) Select individuals to interview for data gathering is actually part of the BIA process.
BU
Buck 1 year ago
I'm pretty sure it's B) Create data-gathering techniques. The BIA is all about gathering and analyzing data, not creating the techniques themselves.
JO
Jolene 1 year ago
↳ replying to Buck
D) Select individuals to interview for data gathering
NA
Nana 1 year ago
↳ replying to Buck
C) Identify the company's critical business functions
ME
Melinda 1 year ago
↳ replying to Buck
A) Alternate site selection
CH
Chauncey 1 year ago
I think the correct answer is A) Alternate site selection. The BIA focuses on identifying critical business functions and their requirements, not selecting alternate sites.
CO
Corrina 1 year ago
↳ replying to Chauncey
Exactly, it's important to have a separate plan for that.
IS
Isabella 1 year ago
↳ replying to Chauncey
Alternate site selection is usually part of the Business Continuity Planning process.
CE
Celeste 1 year ago
↳ replying to Chauncey
Yes, the main focus is on understanding the impact of disruptions on those functions.
CI
Ciara 1 year ago
↳ replying to Chauncey
I agree, the BIA is more about identifying critical business functions.
MY
Myrtie 2 years ago
I see your point, but I still think it's A) Alternate site selection because it's not directly related to the BIA process.
DE
Derrick 2 years ago
I disagree, I believe the answer is B) Create data-gathering techniques.
MY
Myrtie 2 years ago
I think the answer is A) Alternate site selection.
0/2000 characters

Save Cancel