CCSK-M5/M6_在线真题试卷与模拟练习_CCSK-M5/M6

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

REST API 是基于 web 服务的标准, 因为它们使用HTTPS并且能跨平台运行。 REST APIs are the standard for web-based services because they run over HTTPS and work well across diverse environments.

在将代码从独立开发环境转移到生产环境时，云安全联盟在哪个阶段关注安全性和测试活动？ Which meta-phase does the Cloud Security Alliance use to focus on the security and testing activities when moving code from an isolated development environment to production?

当应用程序组件直接与云服务通信时，管理平面和元结构可能会在应用程序安全范围内。 When the application components communicate directly with the cloud service, the management plane and meta structure might fall within the application security scope.

应用程序设计和开发过程的哪个阶段主要集中在架构上？ Which main phase of the application design and development process, is mainly focused on the architecture?

由于提供者的限制，漏洞评估无法轻松集成到CI/CD流程中。 Vulnerability assessments cannot be easily integrated into CI/CD pipelines because of provider restrictions.

下面哪一项有助于减少常见的应用程序安全问题？ Which opportunity helps reduce common application security issues?

哪一项安全措施认为CI/CD可以跟踪所有内容，包括与提交更改的人绑定的源文件中的单个字符更改，以及整个应用程序的堆栈历史。 Which security advantage considers that CI/CD pipelines can track everything, down to individual character changes in source files tied to the person submitting the change, with the entire application stack history?

哪一项被定义为一个给定命名空间内的实体的唯一表示? Which concept is defined as the unique expression of an entity within a given namespace?

哪一项表示身份（包括角色，人物角色和属性）到授权的映射？ Which concept is a mapping of an identity, including roles, person and attributes?

哪一项最好地定义了身份、权限和访问管理（IdEA）的“身份验证”组件？ Which of the following statements best describes adequate encryption protection of data in the cloud?

下面哪项允许不同的目录服务和独立的安全域相互连接? What item below allows disparate directory services and independent security domains to be interconnected?

由事务中实体的声明和属性组成的定义规则集，用于确定它们对云资源的访问级别，称为什么？

A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

将功能关联到一个角色时，将可能的操作列表限制为允许的操作叫什么？ When associating the functions to an actor, what is used to restrict a list of possible actions down to allowed actions?

API和Wed服务需要全面加固，并且必须假设受到了来自通过身份验证和未通过身份验证的对手的攻击。 APIs and wed services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

下面的选项中，哪个选项允许在云环境的安全认证中实现最大的互操作性？

在虚拟服务器上安装为物理服务器设计的安全软件会导致性能严重下降。

安全应用程序设计和开发各个阶段的正确顺序是什么？

动态应用程序安全性测试（DAST）可能受限或需要提供者的预测试许可。

通过正确配置，日志可以跟踪代码、基础设施和配置的每一次更改，并将其回传给提交者和批准者，包括测试结果。

1 2 3