最新的IIBA IIBA-CCA免費考試真題

問題1

A software product that supports threat detection, and compliance and security incident management, through the collection and analysis of security events and other data sources, is known as a:

A. threat risk assessment (TRA).

B. security information and event management system (SIEM).

C. cloud access security broker (CASB).

D. software as a service (SaaS).

正確答案: B

說明：（僅 Fast2test 成員可見）

問題2

An internet-based organization whose address is not known has attempted to acquire personal identification details such as usernames and passwords by creating a fake website. This is an example of?

A. Phishing

B. Ransomware

C. Threat

D. Breach

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

What term is defined as a fix to software programming errors and vulnerabilities?

A. Log

B. Control

C. Patch

D. Release

正確答案: C

說明：（僅 Fast2test 成員可見）

問題4

The opportunity cost of increased cybersecurity is that:

A. cybersecurity adds considerably to the cost of developing new business systems.

B. the potential cost of implementing security will always be less than the potential risk from a breach of customer data.

C. identifying and securing assets and systems requires resources that are therefore not available to other initiatives.

D. costs of meeting regulations are constantly increasing.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題5

SSL/TLS encryption capability is provided by:

A. passwords.

B. controls.

C. protocols.

D. certificates.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題6

Which organizational resource category is known as "the first and last line of defense" from an attack?

A. Classified Data

B. Employees

C. Endpoint Devices

D. Firewalls

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

NIST 800-30 defines cyber risk as a function of the likelihood of a given threat-source exercising a potential vulnerability, and:

A. the effectiveness of the control assurance framework.

B. the pre-disposing conditions of the vulnerability.

C. the resulting impact of that adverse event on the organization.

D. the probability of detecting damage to the infrastructure.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題8

Cybersecurity regulations typically require that enterprises demonstrate that they can protect:

A. business continuity and disaster recovery.

B. applications and technology systems.

C. personal data of customers and employees.

D. trade secrets and other intellectual property.

正確答案: C

說明：（僅 Fast2test 成員可見）

最新的IIBA Certificate in Cybersecurity Analysis - IIBA-CCA免費考試真題

聯系我們

站內鏈接

最新更新