質問 1：
Sara, a security manager, has decided to force expiration of all company passwords by the close of business day. Which of the following BEST supports this reasoning?
A. A recent security breach in which passwords were cracked.
B. Implementation of configuration management processes.
C. Implementation of account lockout procedures.
D. Enforcement of password complexity requirements.
正解：A
質問 2：
When reviewing a digital certificate for accuracy, which of the following would Matt, a security administrator, focus on to determine who affirms the identity of the certificate owner?
A. Trust models
B. Recovery agent
C. CA
D. CRL
正解：C
質問 3：
An administrator notices an unusual spike in network traffic from many sources. The administrator suspects that:
A. it is being caused by the presence of a rogue access point.
B. the internal DNS tables have been poisoned.
C. it is the beginning of a DDoS attack.
D. the IDS has been compromised.
正解：C
質問 4：
An administrator wants to minimize the amount of time needed to perform backups during the week. It is also acceptable to the administrator for restoration to take an extended time frame.
Which of the following strategies would the administrator MOST likely implement?
A. Full backups on the weekend and incremental during the week
B. Differential backups on the weekend and full backups every day
C. Incremental backups on the weekend and differential backups every day
D. Full backups on the weekend and full backups every day
正解：A
質問 5：
The Chief Technical Officer (CTO) is worried about an increased amount of malware detected on end user's workstations. Which of the following technologies should be recommended to detect such anomalies?
A. Web application firewall
B. Web content filter
C. Host-based IDS
D. NIDS
正解：C
質問 6：
Which of the following is the LEAST volatile when performing incident response procedures?
A. Hard drive
B. RAID cache
C. Registers
D. RAM
正解：A
質問 7：
Which of the following access controls enforces permissions based on data labeling at specific levels?
A. Role based access control
B. Mandatory access control
C. Separation of duties access control
D. Discretionary access control
正解：B
Sara, a security manager, has decided to force expiration of all company passwords by the close of business day. Which of the following BEST supports this reasoning?
A. A recent security breach in which passwords were cracked.
B. Implementation of configuration management processes.
C. Implementation of account lockout procedures.
D. Enforcement of password complexity requirements.
正解：A
質問 2：
When reviewing a digital certificate for accuracy, which of the following would Matt, a security administrator, focus on to determine who affirms the identity of the certificate owner?
A. Trust models
B. Recovery agent
C. CA
D. CRL
正解：C
質問 3：
An administrator notices an unusual spike in network traffic from many sources. The administrator suspects that:
A. it is being caused by the presence of a rogue access point.
B. the internal DNS tables have been poisoned.
C. it is the beginning of a DDoS attack.
D. the IDS has been compromised.
正解：C
質問 4：
An administrator wants to minimize the amount of time needed to perform backups during the week. It is also acceptable to the administrator for restoration to take an extended time frame.
Which of the following strategies would the administrator MOST likely implement?
A. Full backups on the weekend and incremental during the week
B. Differential backups on the weekend and full backups every day
C. Incremental backups on the weekend and differential backups every day
D. Full backups on the weekend and full backups every day
正解：A
質問 5：
The Chief Technical Officer (CTO) is worried about an increased amount of malware detected on end user's workstations. Which of the following technologies should be recommended to detect such anomalies?
A. Web application firewall
B. Web content filter
C. Host-based IDS
D. NIDS
正解：C
質問 6：
Which of the following is the LEAST volatile when performing incident response procedures?
A. Hard drive
B. RAID cache
C. Registers
D. RAM
正解：A
質問 7：
Which of the following access controls enforces permissions based on data labeling at specific levels?
A. Role based access control
B. Mandatory access control
C. Separation of duties access control
D. Discretionary access control
正解：B
0 お客様のコメント