Daily CISSP certification common mistakes (April 21, 2022)

CISSP Certification is often wrong （ From Mingxue online test platform ：https://www.maxstu.com/page/1773704）

【 The answer is analyzed after the question 】 

subject 1
Q：Katie The company that works provides mobile phones for employees , And release new phones every two years . When the phone itself is still available and receives operating system updates , Which situation best describes this type of practice ？
The company that Katie works for provides its staff with mobile phones foremployee use, with new phones issued every two years. What scenario bestdescribes this type of practice when the phones themselves are still usable andreceiving operating system updates?
A、EOL
EOL
B、 Plan to scrap
Planned obsolescence
C、EOS
EOS
D、 Equipment risk management
Device risk management

subject 2
Q：Brenda Our organization recently completed the acquisition of rival companies . Which of the following tasks is least likely to be part of the organizational process involved during the acquisition ？
Brenda's organization recently completed the acquisition of a competitor firm. Which one of the following tasks would be LEAST likely to be part of the organizational processes addressed during the acquisition?
A、 Integration of security functions
Consolidation of security functions
B、 Integration of security tools
Integration of security tools
C、 Protection of intellectual property
Protection of intellectual property
D、 Documentation of security policies
Documentation of security policies

subject 3
Q：Kelly It is considered that an employee uses computing resources for sideline work without authorization . After consultation with management , She decided to initiate an administrative investigation . What burden of proof must she meet in this investigation ？
Kelly believes that an employee engaged in the unauthorized use of computing resources for a side business. After consulting with management, she decides to launch an administrative investigation. What is the burden of proof that she must meet in this investigation?
A、 Evidence of superiority
Preponderance of the evidence
B、 Remove reasonable doubt
Beyond a reasonable doubt
C、 Remove the shadow of doubt
Beyond the shadow of a doubt
D、 There is no standard
There is no standard
---------------

There are more free online security certification test questions and wechat learning discussion groups , You can add Mingxue online assistant vx：maxstu_com, Get and join .

---------------
subject 1
answer ：C
analysis ： This is support for termination （EOS） Examples of scenarios . The company deliberately terminated its support for , And according to the data security requirements and strategies formulated by the company , Solve what happens next to the device —— Safe disposal 、 Destroy or resell .EOL It means that the equipment or software is no longer manufactured or supported , Contrary to support termination ,EOS It may be that the service is no longer provided , Including through patches 、 Upgrade or organize maintenance . Planned obsolescence and equipment risk management are not terms used in the examination questions .
This is an example of an end-of-support (EOS) scenario.The company is intentionally ending support and needs to address what happensto the devices next-secure disposal, destruction, or resale—depending on datasecurity requirements and policies set by the company. EOL is when a device orsoftware is no longer made or supported, in contrast to end of support, whichmay be when it is no longer serviced, including via patches, upgrades, ororganizational maintenance. Planned obsolescence and device risk management arenot terms that are used on the exam.

subject 2
answer ：C
analysis ： And acquisition （ One company buys another company ） comparison , In stripping （ The subsidiary was split into an independent organization ） period , Intellectual property protection is a bigger problem . Acquisition issues include integrating security functions and Strategies , And the integration of security tools .
The protection of intellectual property is a greater concern during a divestiture, where a subsidiary is being spun off into a separate organization, than an acquisition, where one firm has purchased another. Acquisition concerns include consolidating security functions and policies as well as integrating security tools.

subject 3
answer ：D
analysis ： Unlike criminal or civil cases , Administrative investigation is an internal affair , No, Kelly The established standard of proof that must be applied . however , Her organization will include the standard of the burden of proof in its internal procedures , To ensure the thoroughness and fairness of the investigation , This is still wise .
Unlike criminal or civil cases, administrative investigations are an internal matter, and there is no set standard of proof that Kelly must apply. However, it would still be wise for her organization to include a standard burden of proof in their own internal procedures to ensure the thoroughness and fairness of investigations.