Free CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 Exam Questions and Answers
BCS Foundation Certificate in Information Security Management Principles V9.0 is one of the BCS tests covered here. BCS is a chartered professional body and an Ofqual-approved awarding organisation, but its certificates span several separate schemes rather than one — its own Foundation, Practitioner and Diploma qualifications across business analysis, security and architecture, alongside ISTQB software testing certifications that BCS administers on behalf of their owner. Titles carry the level word rather than an exam code.
Candidates comparing CISMP-V9 exam dumps, ExamTopics and other CISMP-V9 practice tests use this page for the answers and explanations behind each question. Download the free CISMP-V9 PDF, then sit the timed CISMP-V9 exam simulation before booking with BCS.
Last updated: November 1, 2026
- Provider
- BCS
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Our test mode duration & pass mark
- 130 mins · 70%
- Verified answers
- Reviewed weekly
- Practice format
- Multiple choice
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
Which of the following BEST describes a 'watering hole' attack?
Correct answer: A
Explanation
A watering hole attack compromises a legitimate website that the intended victims are known to visit, so that their devices are infected when they browse it. Targeted fraudulent email is spear phishing, request flooding from many hosts is a distributed denial of service, and impersonating both ends of a conversation is a man-in-the-middle attack.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #2
A software team carries out security testing only after an application has been built. Several design flaws are found and rework is expensive. Which approach would BEST have reduced the cost of fixing these flaws?
Correct answer: B
Explanation
Addressing security from the start of the lifecycle means flaws are prevented or found when they are cheapest to correct. Testing, reviewing or patching late in the lifecycle still finds design flaws only after the work has been done, so rework remains costly.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #3
An employee in the finance department of an organisation is transferred to the marketing department. Which of the following actions are appropriate for the organisation to take? 1. Review the employee's existing access rights and remove those no longer needed for the new role. 2. Allow the employee to keep all finance access for six months to support the handover. 3. Obtain authorisation for the new access rights from the owner of the relevant systems. 4. Copy the access rights of a colleague already working in the marketing department.
Correct answer: B
Explanation
On a change of role, access that is no longer required is removed and new access is granted only with proper authorisation, in line with least privilege. Retaining old access for a transition period leaves unnecessary rights in place, and copying a colleague's profile bypasses authorisation and may grant more than the role needs.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #4
Which of the following BEST describes confidentiality?
Correct answer: A
Explanation
Confidentiality means information is not disclosed to unauthorised individuals, entities or processes. Accuracy and completeness describe integrity, accessibility on demand describes availability, and tracing actions to an individual relates to accountability.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #5
In a hospital, the HR director decides how employee records are classified and who may be given access to them. The IT department stores and backs up the records but makes no decisions about their use. Which role does the HR director hold in relation to these records?
Correct answer: D
Explanation
The information asset owner is accountable for an asset, including its classification and decisions on who may access it. The IT department acts as custodian by looking after the records on the owner's behalf, and the HR director is neither an external processor nor the organisation's senior security lead.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #6
Which type of malicious software is self-replicating and spreads across networks without needing to attach itself to a host file?
Correct answer: B
Explanation
A worm is standalone malware that copies itself and propagates through networks, often by exploiting vulnerabilities. A virus needs a host file or program, a Trojan relies on the user running it while appearing legitimate, and a logic bomb lies dormant until a trigger condition is met.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #7
Which three of the following characteristics form the AAA Triad in Information Security? * 1. Authentication * 2. Availability * 3. Accounting * 4. Asymmetry * 5. Authorisation
Correct answer: D
Explanation
The AAA triad is Authentication, Authorisation and Accounting, which is items 1, 3 and 5; availability belongs to the CIA triad, not AAA.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #8
For which security-related reason SHOULD staff monitoring critical CCTV systems be rotated regularly during each work session?
Correct answer: D
Explanation
Concentrated attention on CCTV monitors degrades after roughly 20 minutes, so operators are rotated within a session to keep detection effective.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #9
What physical security control would be used to broadcast false emanations to mask the presence of true electromagentic emanations fromgenuine computing equipment?
Correct answer: D
Explanation
White noise generation masks genuine electromagnetic emanations by broadcasting false ones, so any intercepted signal cannot be interpreted. A Faraday cage blocks emanations rather than masking them, and unshielded cabling or copper-infused windows create no false signals.
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #10
Which of the following acronyms covers the real-time analysis of security alerts generated by applications and network hardware?
Correct answer: B
Explanation
https://en.wikipedia.org/wiki/Security_information_and_event_management
Continue with CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Discussion
Explain your reasoning, not just the letterOther BCS certifications
- ISTQB® Certified Tester Foundation Level (CTFL) (opens in a new tab)
- Practitioner Certificate in Data Protection (opens in a new tab)
- Essential Digital Skills for Work (opens in a new tab)
- Foundation Certificate in Business Analysis (opens in a new tab)
- Essentials Certificate in Artificial Intelligence (opens in a new tab)
- ISTQB® Certified Tester Foundation Level - AI Testing (opens in a new tab)
- Practitioner Certificate in Modelling Business Processes (opens in a new tab)
- International Diploma in Business Analysis (opens in a new tab)
- Diploma in IT (opens in a new tab)
- ISTQB® Certified Tester Advanced Level Technical Test Analyst (opens in a new tab)
- ISEB-SWT2: ISTQB-ISEB Certified Tester Foundation Level (BH0-010) (opens in a new tab)
- Foundation Certificate in IT Service Management (opens in a new tab)
Reviews
Write a review★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit SharmaVerified buyer
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar NyströmVerified buyer
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah SmithVerified buyer
FAQ
Learn More: https://www.bcs.org/qualifications-and-certifications/certifications-for-professionals/
- Q1: What is the CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 exam?
- A: CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 is a BCS certification exam. Judging by the questions in our bank, it concentrates on organisations, standards, card, contract and continuity.
- Q2: What topics does the CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 exam cover?
- A: Questions in our CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 bank cluster around organisations, standards, card, contract, continuity, credit, framework and owner. Working through the full set is the quickest way to find which of these you are weakest on.
- Q3: How should I prepare for CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0?
- A: Work through the CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 practice questions here, checking your answer on each one, then sit the practice test to rehearse the exam under timed conditions before the real thing.
- Q4: Are these real CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 exam questions?
- A: They are drawn from officially released past questions and from community members who have sat CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0. Answers are verified and updated weekly.
- Q5: Where do I register for the CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 exam?
- A: Register through BCS directly. Exampractice is not affiliated with BCS and does not administer the exam.
- Q6: Is there a free CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 sample?
- A: Yes. Every CISMP-V9: BCS Foundation Certificate in Information Security Management Principles V9.0 page shows a free sample of real questions. Upgrading opens the full bank and the practice test.
- Q7: What are BCS Certification Exams?
- A: BCS (The Chartered Institute for IT) Certification Exams validate your expertise in various IT disciplines, including business analysis, IT service management, software testing, and cybersecurity. These certifications demonstrate your proficiency in applying best practices and standards within the IT industry.
- Q8: Why should I pursue BCS Certification?
- A: BCS Certification enhances your professional credibility, showcasing your skills and knowledge in IT. This can lead to better job opportunities, higher salaries, and career advancement in the IT and business sectors.
- Q9: What are the benefits of BCS Certification?
- A: Benefits include recognition as a certified IT professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest IT industry trends and best practices.
- Q10: Who should take BCS Certification Exams?
- A: IT professionals, business analysts, software testers, cybersecurity experts, and anyone involved in IT management and development should consider these certifications to validate their expertise and advance their careers.
- Q11: What types of BCS Certification Exams are available?
- A: BCS offers various certification paths, including Foundation Certificates, Practitioner Certificates, Professional Certificates, and Higher Level Certificates in areas such as Business Analysis, IT Service Management, Software Testing, and Cybersecurity.
- Q12: How do I prepare for BCS Certification Exams?
- A: Preparation can include official BCS training courses, study guides, practice exams, online tutorials, and hands-on experience in relevant IT and business analysis practices.
- Q13: Where can I take BCS Certification Exams?
- A: BCS Certification Exams can be taken at authorized testing centers worldwide or online, providing flexibility to fit your schedule and location.
- Q14: How do BCS Certifications impact my career?
- A: BCS Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in IT and business sectors.
- Q15: Are there any prerequisites for BCS Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior certifications. Check the specific requirements for each certification path on the BCS website.
- Q16: How often do I need to recertify for BCS Certifications?
- A: BCS Certifications typically do not have a recertification requirement, but staying updated with the latest industry practices and continuing professional development is recommended to maintain your skills and relevance in the IT industry.