Free ISC2 ISSMP Exam Questions

Become ISC2 Certified with updated ISSMP exam questions and correct answers

Page: 1 / 45

Total 224 Questions | Updated On: Sep 10, 2025

Add To Cart

Question 1

Which of the following security controls will you use for the deployment phase of the SDLC to build

secure software?

Each correct answer represents a complete solution. Choose all that apply.

A : lnerability Assessment and Penetration Testing

B : curity Certification and Accreditation (C&A)

C : ange and Configuration Control

D : k Adjustments

Answer: A,B,D

Question 2

Which of the following statements reflect the 'Code of Ethics Preamble' in the '(ISC)2 Code of Ethics'?

Each correct answer represents a complete solution. Choose all that apply.

A : Strict adherence to this Code is a condition of certification.

B : Safety of the commonwealth, duty to our principals, and to each other requires that weadhere, and be seen to adhere, to the highest ethical standards of behavior.

C : vance and protect the profession.

D : ovide diligent and competent service to principals.

Answer: A,B

Question 3

Rachael is the project manager for a large project in her organization. A new change request has

been proposed that will affect several areas of the project. One area of the project change impact is

on work that a vendor has already completed. The vendor is refusing to make the changes as they've

already completed the project work they were contracted to do. What can Rachael do in this

instance?

A : reaten to sue the vendor if they don't complete the work.

B : re the vendor for failing to complete the contractual obligation.

C : Withhold the vendor's payments for the work they've completed.

D : fer to the contract agreement for direction.

Answer: D

Question 4

Which of the following is a variant with regard to Configuration Management?

A : A CI that has the same name as another CI but shares no relationship.

B : A CI that particularly refers to a hardware specification.

C : A CI that has the same essential functionality as another CI but a bit different in some smallmanner.

D : CI that particularly refers to a software version.

Answer: A

Question 5

In which of the following mechanisms does an authority, within limitations, specify what objects can

be accessed by a subject?

A : le-Based Access Control

B : cretionary Access Control

C : k-based Access Control

D : ndatory Access Control

Answer: B

Page: 1 / 45

Total 224 Questions | Updated On: Sep 10, 2025

Add To Cart