156-110試験無料問題集（110題）「CheckPoint Check Point Certified Security Principles Associate (CCSPA) 認定」

出題：1

Which type of Business Continuity Plan (BCP) test involves shutting down a primary site, bringing an alternate site on-line, and moving all operations to the alternate site?

A. Parallel

B. Structured walkthrough

C. Simulation

D. Checklist

E. Full interruption

正解：E 解答を投票する

出題：2

Embedding symbols in images or common items, such as pictures or quilts, is an example of __________.

A. Steganography

B. Transposition cipher

C. Espionage

D. Key exchange

E. Arithmancy

正解：A 解答を投票する

出題：3

Which of the following calculations is used when selecting countermeasures?

A. Single Loss Expectancy

B. Annualized Loss Expectancy

C. Annualized Rate of Occurrence

D. Business Impact Analysis

E. Business Continuity Plan

正解：B 解答を投票する

出題：4

The items listed below are examples of ___________________ controls.
*Procedures and policies
*Employee security-awareness training
*Employee background checks
*Increasing management security awareness

A. Physical

B. Mandatory

C. Technical

D. Administrative

E. Role-based

正解：D 解答を投票する

出題：5

A(n) _______________ is an unintended communication path that can be used to violate a system security policy.

A. Integrity axiom

B. Aggregated data set

C. Covert channel

D. Inferred fact

E. Simple rule violation

正解：C 解答を投票する

出題：6

Which of these choices correctly describe denial-of-service (DoS) attacks? (Choose
THREE.)

A. DoS attacks cause the attacked system to accept legitimate access requests.

B. DoS attacks are nearly impossible to stop, once they begin.

C. DoS attacks do not require attackers to have any privileges on a target system.

D. DoS ties up a system with so many requests, system resources are consumed, and performance degrades.

E. DoS attacks free the target system of excessive overhead.

正解：B,C,D 解答を投票する

出題：7

Which of the following statements about encryption's benefits is false? Encryption can:
(Choose TWO.)

A. significantly reduce the chance information will be modified by unauthorized entities.

B. only be used to protect data in transit. Encryption provides no protection to stored data.

C. prevent information from being destroyed by malicious entities, while in transit.

D. allow private information to be sent over public networks, in relative safety.

E. significantly reduce the chance information will be viewed by unauthorized entities.

正解：B,C 解答を投票する

出題：8

A(n) _______ occurs when intrusion-detection measures fail to recognize suspicious traffic or activity.

A. Threshold

B. False negative

C. CIFS pop-up

D. False positive

E. Alarm

正解：B 解答を投票する

出題：9

____________________ are the people who consume, manipulate, and produce information assets.

A. Information asset owners

B. Audit-control groups

C. Business-unit owners

D. Functional users

E. Information custodians

正解：D 解答を投票する

出題：10

Which TWO of the following items should be accomplished, when interviewing candidates for a position within an organization?

A. Verify all dates of previous employment.

B. Run criminal-background checks.

C. Contact personal and professional references.

D. Question candidates, using polygraphs.

E. Hire an investigation agency to run background checks.

正解：A,C 解答を投票する

156-110試験無料問題集「CheckPoint Check Point Certified Security Principles Associate (CCSPA) 認定」