CISSP-ISSMP Exam Questions and Answers

QUESTION: 28

Which of the following processes is described in the statement below? "It is the process of implementing risk response plans, tracking identified risks, monitoring residual risk, identifying new risks, and evaluating risk process effectiveness throughout the project."

Monitor and Control Risks
Identify Risks
Perform Qualitative Risk Analysis
Perform Quantitative Risk Analysis

Answer(s): A

Reveal Solution Next Question

QUESTION: 29

Walter is the project manager of a large construction project. He'll be working with several vendors on the project. Vendors will be providing materials and labor for several parts of the project. Some of the works in the project are very dangerous so Walter has implemented safety requirements for all of the vendors and his own project team. Stakeholders for the project have added new requirements, which have caused new risks in the project. A vendor has identified a new risk that could affect the project if it comes into fruition. Walter agrees with the vendor and has updated the risk register and created potential risk responses to mitigate the risk. What should Walter also update in this scenario considering the risk event?

Project contractual relationship with the vendor
Project management plan
Project communications plan
Project scope statement

Answer(s): B

Reveal Solution Next Question

QUESTION: 30

You are the project manager of the HJK Project for your organization. You and the project team have created risk responses for many of the risk events in the project. Where should you document the proposed responses and the current status of all identified risks?

Risk management plan
Lessons learned documentation
Risk register
Stakeholder management strategy

Answer(s): C

Reveal Solution Next Question

QUESTION: 31

Which of the following security controls will you use for the deployment phase of the SDLC to build secure software? Each correct answer represents a complete solution. Choose all that apply.

Vulnerability Assessment and Penetration Testing
Security Certification and Accreditation (C&A)
Change and Configuration Control
Risk Adjustments

Answer(s): A,B,D

Reveal Solution Next Question

QUESTION: 32

Which of the following can be prevented by an organization using job rotation and separation of duties policies?

Collusion
Eavesdropping
Buffer overflow
Phishing

Answer(s): A

Reveal Solution Next Question

ISC CISSP-ISSMP Exam (page: 6) ISC CISSP-ISSMP Information Systems Security Management Professional Updated on: 12-Jan-2026

QUESTION: 28

QUESTION: 29

QUESTION: 30

QUESTION: 31

QUESTION: 32

ISC CISSP-ISSMP Exam (page: 6)
ISC CISSP-ISSMP Information Systems Security Management Professional
Updated on: 12-Jan-2026