最新的ISC ISSMP免費考試真題

問題1

Which of the following options is an approach to restricting system access to authorized users?

A. MAC

B. DAC

C. MIC

D. RBAC

正確答案: D

問題2

Which of the following is a variant with regard to Configuration Management?

A. A CI that particularly refers to a software version.

B. A CI that has the same essential functionality as another CI but a bit different in some small manner.

C. A CI that particularly refers to a hardware specification.

D. A CI thathas the same name as another CI but shares no relationship.

正確答案: B

問題3

A Web-based credit card company had collected financial and personal details of Mark before issuing him a credit card. The company has now provided Mark's financial and personal details to another company. Which of the following Internet laws has the credit card issuing company violated?

A. Trademark law

B. Security law

C. Privacy law

D. Copyright law

正確答案: C

問題4

Which of the following fields of management focuses on establishing and maintaining consistency of a system's or product's performance and its functional and physical attributes with its requirements, design, and operational information throughout its life?

A. Configuration management

B. Risk management

C. Procurement management

D. Change management

正確答案: A

問題5

Fill in the blank with an appropriate phrase.________ models address specifications, requirements, and design, verification and validation, and maintenance activities.

A. Life cycle

正確答案: A

問題6

Fill in the blank with an appropriate phrase.______________ is used to provide security mechanisms for the storage, processing, and transfer of data.

A. Data classification

正確答案: A

問題7

Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?

A. The Change Manager

B. The IT Security Manager

C. The Configuration Manager

D. The Service Level Manager

正確答案: B

問題8

Which of the following statements is related with the first law of OPSEC?

A. If you are not protecting it (the critical and sensitive information), the adversary wins!

B. If you don't know what to protect, how do you know you are protecting it?

C. If you don't know about your security resources you could not protect your network.

D. If you don't know the threat, how do you know what toprotect?

正確答案: D

問題9

What course of action can be taken by a party if the current negotiations fail and an agreement cannot be reached?

A. PON

B. ZOPA

C. Bias

D. BATNA

正確答案: D

問題10

Which of the following models uses a directed graph to specify the rights that a subject can transfer to an object or that a subject can take from another subject?

A. Biba Integrity Model

B. Bell-LaPadula Model

C. Take-Grant Protection Model

D. Access Matrix

正確答案: C

問題11

Eric is the project manager of the NQQ Project and has hired the ZAS Corporation to complete part of the project work for Eric's organization. Due to a change request the ZAS Corporation is no longer needed on the project even though they have completed nearly all of the project work. Is Eric's organization liable to pay the ZAS Corporation for the work they have completed so far on the project?

A. No, the ZAS Corporation did not complete all of the work.

B. Yes, the ZAS Corporation did not choose to terminate the contract work.

C. It depends on what the outcome of a lawsuit will determine.

D. It dependson what the termination clause of the contract stipulates.

正確答案: D

問題12

Which of the following laws or acts, formed in Australia, enforces prohibition against cyber
stalking?

A. Stalking by Electronic Communications Act (2001)

B. Anti-Cyber-Stalking law (1999)

C. Malicious Communications Act (1998)

D. Stalking Amendment Act(1999)

正確答案: D

最新的ISC ISSMP:Information Systems Security Management Professional - ISSMP免費考試真題

聯系我們

站內鏈接

最新更新