CISMP-V9試験無料問題集（102題）「BCS Foundation Certificate in Information Security Management Principles V9.0 認定」

出題：1

What Is the first yet MOST simple and important action to take when setting up a new web server?

A. Change default system passwords.

B. Patch the OS to the latest version

C. Fully encrypt the hard disk.

D. Apply hardening to all applications.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

When considering outsourcing the processing of data, which two legal "duty of care" considerations SHOULD the original data owner make?
1 Third party is competent to process the data securely.
2. Observes the same high standards as data owner.
3. Processes the data wherever the data can be transferred.
4. Archive the data for long term third party's own usage.

A. 2 and 3.

B. 1 and 4.

C. 1 and 2.

D. 3 and 4.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

A system administrator has created the following "array" as an access control for an organisation.
Developers: create files, update files.
Reviewers: upload files, update files.
Administrators: upload files, delete fifes, update files.
What type of access-control has just been created?

A. Rule based access control.

B. Task based access control.

C. Mandatory access control.

D. Role based access control.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A penetration tester undertaking a port scan of a client's network, discovers a host which responds to requests on TCP ports 22, 80, 443, 3306 and 8080.
What type of device has MOST LIKELY been discovered?

A. File server.

B. Firewall.

C. Printer.

D. Web server

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

What is the name of the method used to illicitly target a senior person in an organisation so as to try to coerce them Into taking an unwanted action such as a misdirected high-value payment?

A. C-suite spamming.

B. Whaling.

C. Trawling.

D. Spear-phishing.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

When seeking third party digital forensics services, what two attributes should one seek when making a choice of service provider?

A. Appropriate company accreditation and staff certification.

B. Affiliation with local law enforcement bodies and local government regulations.

C. Formal certification to ISO/IEC 27001 and alignment with ISO 17025.

D. Clean credit references as well as international experience.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

What Is the root cause as to why SMS messages are open to attackers and abuse?

A. SMS technology was never intended to be used to transmit high risk content such as One-time payment codes.

B. There are only two mobile phone platforms - Android and iOS - reducing the number of target environments.

C. The vast majority of mobile phones globally support the SMS protocol inexpensively.

D. The store and forward nature of SMS means it is considered a 'fire and forget service'.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

When securing a wireless network, which of the following is NOT best practice?

A. Use MAC tittering on a SOHO network with a smart group of clients.

B. Using WPA encryption on the wireless network.

C. Turning on SSID broadcasts to advertise security levels.

D. Dedicating an access point on a dedicated VLAN connected to a firewall.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Ensuring the correctness of data inputted to a system is an example of which facet of information security?

A. Authenticity.

B. Integrity.

C. Availability.

D. Confidentiality.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What form of risk assessment is MOST LIKELY to provide objective support for a security Return on Investment case?

A. Quantitative

B. Qualitative.

C. CPNI.

D. ISO/IEC 27001.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

CISMP-V9試験無料問題集「BCS Foundation Certificate in Information Security Management Principles V9.0 認定」