ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition

Chapter 10Practice Test 2

1. James is building a disaster recovery plan for his organization and would like to determine the amount of acceptable data loss after an outage. What variable is James determining?
   1. SLA
   2. RTO
   3. MTD
   4. RPO
2. In his role, Chris is expected to protect the interests of the organization, as well as the customers whose information he is charged to protect. What term describes the preparation and research undertaken before decisions and actions are made?
   1. Due care
   2. Compliance
   3. Due diligence
   4. Regulatory action
3. Ade is part of a penetration testing exercise. As part of the process his role is to act as a defender. What color is frequently used to describe defenders in penetration testing exercises?
   1. Red teams
   2. Yellow teams
   3. Green ...