(ISC)2 CISSP Certified Information Systems Security Professional Official Practice Tests, 3rd Edition

Chapter 10Practice Test 2

1. James is building a disaster recovery plan for his organization and would like to determine the amount of acceptable data loss after an outage. What variable is James determining?
   1. SLA
   2. RTO
   3. MTD
   4. RPO
2. In his role, Chris is expected to protect the interests of the organization, and the customers whose information he is charged to protect. What term describes the preparation and research undertaken before decisions and actions are made?
   1. Due care
   2. Compliance
   3. Due diligence
   4. Regulatory action
3. Alex is preparing to solicit bids for a penetration test of his company's network and systems. He wants to maximize the effectiveness of the testing rather than the realism of the test. What type of penetration test should he require ...