ISSMP 試験問題を無料オンラインアクセス

Which of the following contract types is described in the statement below? "This contract type provides no incentive for the contractor to control costs and hence is rarely utilized."

• A.Cost Plus Incentive Fee
• B.Cost Plus Percentage of Cost
• C.Cost Plus Award Fee
• D.Cost Plus Fixed Fee

Which of the following are the levels of military data classification system? Each correct answer represents a complete solution. Choose all that apply.

• A.Secret
• B.Public
• C.Sensitive
• D.Confidential
• E.Top Secret
• F.Unclassified

Which of the following policies helps reduce the potential damage from the actions of one person?

• A.Risk assessment
• B.CSA
• C.Separation of duties
• D.Internal audit

Which of the following measurements of an enterprise's security state is the process whereby an organization establishes the parameters within which programs, investments, and acquisitions reach the desired results?

• A.Information sharing
• B.Risk management
• C.Ethics
• D.Performance measurement

Which of the following statements are true about security risks? Each correct answer represents a complete solution. Choose three.

• A.They are considered an indicator of threats coupled with vulnerability.
• B.They can be removed completely by taking proper actions.
• C.They can be analyzed and measured by the risk analysis process.
• D.They can be mitigated by reviewing and taking responsible actions based on possible risks.