CISSP官方练习题-第三版_在线真题试卷与模拟练习_CISSP官方练习题-第三版

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

Francine is a security specialist for an online service provider in the United States. She recently received a claim from a copyright holder that a user is storing information on her service that violates the third party’s copyright. What law governs the actions that Francine must take?

Renee 正在与她的董事会讨论他们审查网络安全控制的责任。什么规则要求高级管理人员对信息安全事务承担个人责任?

Renee is speaking to her board of directors about their responsibilities to review cybersecurity controls. What rule requires that senior executives take personal responsibility for information security matters?

Brenda 的组织最近完成了对竞争对手公司的收购。以下哪一项任务最不可能成为收购期间处理的组织流程的一部分?

Brenda’s organization recently completed the acquisition of a competitor firm. Which one of the following tasks would be LEAST likely to be part of the organizational processes addressed during the acquisition?

Kelly 认为,一名员工未经授权将计算资源用于副业。在与管理层协商后,她决定启动行政调查。她在这次调查中必须满足的举证责任是什么?

Kelly believes that an employee engaged in the unauthorized use of computing resources for a side business. After consulting with management, she decides to launch an administrative investigation. What is the burden of proof that she must meet in this investigation?

Acme Widgets 公司正在为其会计部门实施新的控制措施。管理层担心流氓会计师可能会创建一个新的虚假供应商,然后向该供应商开具支票作为从未提供的服务的付款。什么安全控制可以最好地帮助防止这种情况?
The Acme Widgets Company is putting new controls in place for its accounting department. Management is concerned that a rogue accountant may be able to create a new false vendor and then issue checks to that vendor as payment for services that were never rendered. What security control can best help prevent this situation?

弗洛里安收到美国联邦政府机构的传单,宣布一项新的行政法将影响他的业务运营。他应该去哪里寻找法律文本?
Florian receives a flyer from a U.S. federal government agency announcing that a new administrative law will affect his business operations. Where should he go to find the text of the law?

Jeff 想采用行业标准方法来评估其组织用来管理风险的流程。哪种成熟度模型最适合他的使用?
Jeff would like to adopt an industry-standard approach for assessing the processes his organization uses to manage risk. What maturity model would be most appropriate for his use?

罗杰的组织遭遇了客户信用卡记录的泄露。根据 PCI DSS 的条款,哪个组织可以选择对此事进行调查?
Roger’s organization suffered a breach of customer credit card records. Under the terms of PCI DSS, what organization may choose to pursue an investigation of this matter?

Rick 最近聘请了他所在组织的每个业务部门的关键员工,要求他们在他的安全意识计划方面提供帮助。他们将负责与同行分享安全信息并回答有关网络安全问题的问题。哪个术语最能描述这种关系?
Rick recently engaged critical employees in each of his organization’s business units to ask for their assistance with his security awareness program. They will be responsible for sharing security messages with their peers and answering questions about cybersecurity matters. What term best describes this relationship?

Chas 最近完成了其组织的业务连续性计划的制定。谁是批准组织业务连续性计划的理想人选?
Chas recently completed the development of his organization’s business continuity plan. Who is the ideal person to approve an organization’s business continuity plan?

马特在一家电信公司工作,一名联邦特工联系了马特,寻求协助根据搜查令窃听马特的一个客户。以下哪一项法律要求通信服务提供商配合执法请求?

Nadia 的公司正在运营一个混合云环境,其中包含一些现场系统和一些基于云的系统。她拥有有令人满意的现场监控,但需要对其用户参与的活动应用安全策略,并与她一起报告异常情况越来越多的云服务。什么类型的工具最适合此目的?

Megan wants to prepare media to allow for its reuse in an environment operating at the same sensitivity level. Which of the following is the best option to meet her needs?

您可以使用什么技术来标记您的商业秘密信息,以防它被泄露或被盗并且您需要识别它?
What technique could you use to mark your trade secret information in case it was released or stolen and you need to identify it?

Chris 负责整个公司的工作站,并且知道公司的一些工作站用于处理专有信息和高度敏感的商业机密。哪个选项最能描述他负责的工作站在生命周期结束(EOL)时应该做的的操作?

Shandra wants to secure an encryption key. Which location would be the most difficult to protect, if the key was kept and used in that location?

Chris 需要识别网络上的所有活动系统和设备。以下哪种技术可以为他提供最完整的连接设备列表?

Chris 知道他的库存只有在完成时才是准确的。他如何才能最好地确保它保持最新状态?

根据 NIST SP 800-18,系统所有者不执行以下哪个任务?

1 2 3 4 5 6 11

更多题库