CISSP Security Evaluation Testing Security Operation Exam

Sample Questions

Q) Which of the following tests to check the efficiency of an application without looking into its inner structure, or knowing the details of its innards?

a) black box testing

b) parallel test

c) regression testing

d) testing

e) None

Q) Which of the following is not a method used to conduct a penetration test?

a) traffic padding

b) scanning and sensing

c) war set

d) sniffing

e) None

Q) Which of the following is not a valid reason for the use of external services penetration of firms, rather than corporate resources?

a) They are more cost-effective

b) They do not provide any corporate bias

c) They use a very talented former hacker

d) They provide a full account

e) None

Q) General criteria are level of assurance against Ouda Ouda 1 to 7 with respect to the depth of development and testing. Which of the following objective software evaluation (or NGOs) methodically designed, tested and analyzed?

a) EAL 3

b) EAL 4

c) EAL 5

d) EAL 6

e) None