최신 CISSP 무료덤프 - ISC Certified Information Systems Security Professional (CISSP)

A. Limited role-based access control (RBAC)

B. Rule-based access control

C. Access control list (ACL)

D. Minimum access control

A. Hire a guard to protect the public area

B. Supply a duress alarm for personnel exposed to the public

C. Install mantraps at the building entrances

D. Enclose the personnel entry area with polycarbonate plastic

A. Packet filtering

B. Port services filtering

C. Application access control

D. Content filtering

A. An attack that exploits a SQL injection vulnerability

B. An attack that relies solely on social engineering

C. An attack launched from a single source targeting a single vulnerability

D. An attack that uses multiple compromised systems, often forming a botnet, to overwhelm a target with traffic and disrupt availability

A. Network authentication for wired and wireless networks

B. Network authentication for only wireless networks

C. Wireless network encryption using Secure Sockets Layer (SSL)

D. Wireless encryption using the Advanced Encryption Standard (AES)

A. Enrollment

B. Authorization

C. Trust

D. Provisioning

A. The consistency of distributing patches to each participating computer

B. Requires that software be installed, running, and managed on all participating computers

C. The significant amount of network bandwidth while scanning computers

D. Time to gather vulnerability information about the computers in the program

A. Follow the software end-of-life schedule

B. Transfer the risk to the cloud service provider

C. Implement a dedicated COTS sandbox environment

D. Examine the software updating and patching process

A. Ensure that the service provider updates and tests its Disaster Recovery Plan (DRP) on a yearly basis.

B. Validate the service provider's PCI-DSS compliance status on a regular basis.

C. Perform a service provider PCI-DSS assessment on a yearly basis.

D. Validate that the service providers security policies are in alignment with those of the organization.

A. System Security Architect

B. Data Owner

C. Security Requirements Analyst

D. Information Systems Security Officer