BCS Foundation Certificate in Information Security Management Principles V9.0 - CISMP-V9 Exam Practice Test

How might the effectiveness of a security awareness program be effectively measured?
1) Employees are required to take an online multiple choice exam on security principles.
2) Employees are tested with social engineering techniques by an approved penetration tester.
3) Employees practice ethical hacking techniques on organisation systems.
4) No security vulnerabilities are reported during an audit.
5) Open source intelligence gathering is undertaken on staff social media profiles.

What type of attack attempts to exploit the trust relationship between a user client based browser and server based websites forcing the submission of an authenticated request to a third party site?

Which security framework impacts on organisations that accept credit cards, process credit card transactions, store relevant data or transmit credit card data?

When securing a wireless network, which of the following is NOT best practice?

What Is the root cause as to why SMS messages are open to attackers and abuse?

What Is the PRIMARY security concern associated with the practice known as Bring Your Own Device (BYOD) that might affect a large organisation?

James is working with a software programme that completely obfuscates the entire source code, often in the form of a binary executable making it difficult to inspect, manipulate or reverse engineer the original source code.
What type of software programme is this?

Which of the following international standards deals with the retention of records?

In order to maintain the currency of risk countermeasures, how often SHOULD an organisation review these risks?

Select the document that is MOST LIKELY to contain direction covering the security and utilisation of all an organisation's information and IT equipment, as well as email, internet and telephony.