1429 お客様のコメント
質問 1：
What sort of security does a Public Key Infrastructure (PKI) offer?
A. Having a PKI shows customers that a web-based business is secure.
B. A PKI ensures that backups of company data are made on a regular basis.
C. By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.
D. It provides digital certificates that can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.
正解：B
質問 2：
The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?
A. Encryption of information
B. The use of tokens to gain access to information systems
C. Information Security Management System
D. Validation of input and output data in applications
正解：C
質問 3：
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of threats and risks.
What is the relation between a threat, risk and risk analysis?
A. A risk analysis identifies threats from the known risks.
B. Risk analyses help to find a balance between threats and risks.
C. A risk analysis is used to remove the risk of a threat.
D. A risk analysis is used to clarify which threats are relevant and what risks they involve.
正解：D
質問 4：
Select the controls that correspond to the domain "9. ACCESS CONTROL" of ISO / 27002 (Choose three)
A. Return of assets
B. Management of access rights with special privileges
C. Withdrawal or adaptation of access rights
D. Restriction of access to information
正解：A,C,D
質問 5：
Companies use 27002 for compliance for which of the following reasons:
A. Compliance with ISO 27002 is sufficient to comply with all regulations
B. A structured program that helps with security and compliance
C. Explicit requirements for all regulations
正解：B
What sort of security does a Public Key Infrastructure (PKI) offer?
A. Having a PKI shows customers that a web-based business is secure.
B. A PKI ensures that backups of company data are made on a regular basis.
C. By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.
D. It provides digital certificates that can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.
正解：B
質問 2：
The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?
A. Encryption of information
B. The use of tokens to gain access to information systems
C. Information Security Management System
D. Validation of input and output data in applications
正解：C
質問 3：
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of threats and risks.
What is the relation between a threat, risk and risk analysis?
A. A risk analysis identifies threats from the known risks.
B. Risk analyses help to find a balance between threats and risks.
C. A risk analysis is used to remove the risk of a threat.
D. A risk analysis is used to clarify which threats are relevant and what risks they involve.
正解：D
質問 4：
Select the controls that correspond to the domain "9. ACCESS CONTROL" of ISO / 27002 (Choose three)
A. Return of assets
B. Management of access rights with special privileges
C. Withdrawal or adaptation of access rights
D. Restriction of access to information
正解：A,C,D
質問 5：
Companies use 27002 for compliance for which of the following reasons:
A. Compliance with ISO 27002 is sufficient to comply with all regulations
B. A structured program that helps with security and compliance
C. Explicit requirements for all regulations
正解：B
Yamada -
安心します。余裕でISO-IEC-LIに受かりました！！