CISSP最接近真题的250道模拟Practice Questions

CISSP最接近真题的250道模拟Practice Questions
4 l7 |2 T1 t! m4 U9 m
课程介绍、目录及截图:
( B4 ~6 Q( g: Y+ V) i9 n' j7 Z/ vPractice Questions
Chapter 1
$ _# b2 Q$ V9 L4 z9 ?8 s1. What is the correct approach for addressing security and organization
4 s! c6 l* j* k/ Y0 v4 u9 d( s/ Sobjectives?
& o# q: n" Q: `+ ^( e' h/ [6 Ia. Security and organization objectives should be developed separately.
b. Security should drive organization objectives.
. p, L2 h! c& p% o5 uc. Security should support organization objectives.
d. The site security officer should approve or reject organization
. C8 V4 ~+ ?% T% s$ a. `* Qobjectives.
2. The statement, “Promote professionalism among information system
: ^3 j$ D5 z  B+ M: }0 R" g' _security practitioners through the provisioning of professional certification
8 t1 f& D! `2 p- Sand training” is an example of a/an:
a. Mission statement
( a2 p3 v. n4 y, I' ~b. Objective
) j4 [3 q/ z% M' N" |: k) n+ a! ec. Goal
" s  ~1 T$ w8 S# vd. Requirement
3. The two components of risk management are:
+ m5 ]. Y! D9 Q9 ]/ J# Na. Risk assessment and risk analysis
b. Vulnerability assessment and risk treatment
1 Y4 W7 ^$ Q* x9 ~8 H% yc. Risk assessment and risk mitigation
d. Risk assessment and risk treatment
9 N% ^! n6 q2 m% x; {4 o$ u* H" r4. A security manager needs to perform a risk assessment on a critical
' d/ P% z2 b% Ibusiness application in order to determine what additional controls may be
7 Q5 d1 a9 t6 }8 w" Mneeded to protect the application and its databases. The best approach to
8 I5 c0 g, F" p. F- i; T5 O8 hperforming this risk assessment is:
a. Perform a qualitative risk assessment only
b. Perform a quantitative risk assessment only
8 I" J) \; c- d# n" a版权归原作者所有 本资料只供试读 更多资源请访问 攻城狮论坛 http://bbs.vlan5.com/
( o' s% S3 |: n, U% ~攻城狮论坛(技术+生活)群 2258097 CCNA|CCNP免费答疑题库 284340425
- f5 P5 |& {9 m% I: R! D/ ic. Perform a qualitative risk assessment first, then perform a quantitative
risk assessment
d. Perform a quantitative risk assessment, then perform a qualitative risk
assessment
5. A qualitative risk assessment is used to identify:
a. Vulnerabilities, threats, and countermeasures
* `( y1 K) B9 V2 yb. Vulnerabilities, threats, threat probabilities, and countermeasures
c. Assets, risks, and mitigation plans
% E% B. D: \' n1 kd. Vulnerabilities and countermeasures
2 p3 z7 n4 f2 L3 x# |6. The impact of a specific threat is defined as:
- x5 v8 F- V4 ?) H; w. h5 Ha. The cost of recovering the asset
b. The cost required to protect the related asset
c. The effect of the threat if it is realized
d. The loss of revenue if it is realized
7. Exposure factor is defined as:
a. The part of an asset's value that is likely to be lost by a particular threat
$ }/ `' j- P; L* cb. The probability that the threat will be realized
1 {# }4 F# W  A# l0 T- qc. The probability that a loss will occur in a year’s time
d. The cost of a single loss
! p: e! f" j/ p: ~7 {8. A security manager is performing a quantitative risk assessment on a
particular asset. The security manager wants to determine the quantitative
8 {7 o" c* s/ l# f1 t/ v% o( Closs for a single loss based on a particular threat. The correct way to
calculate this is:
a. Divide the asset’s value by the exposure factor
b. Multiply the asset’s value times the annualized rate of occurrence
c. Multiply the asset’s value times the single loss expectancy
d. Multiply the asset’s value times the exposure factor
9. A security manager is performing a quantitative risk assessment on a
particular asset. The security manager wants to estimate the yearly loss
9 |0 k1 z3 B$ y, \$ h# u. o* g6 @/ ibased on a particular threat. The correct way to calculate this is:
' S5 K- ^' J- k" i  v1 {+ p! a
/ `% Y9 y9 D1 @& n下载链接:

游客，如果您要查看本帖隐藏内容请回复

论坛便捷链接:

最新视频发布?--->点这里	下载链接失效?--->点这里	求视频/帮助?--->点这里
免费领金币?--->点这里	解压缩密码?--->点这里	关注微信/微博?---> 点这里

7 Y; K7 K. t1 Q& G2 m

能帮助您和更多的人找到自己想要的资料并取得更大进步,是我们最大的愿望。

                                                                                                                                                                                      

你知道么? 通过论坛客服报名CCNA,CCNP,CCIE 最高可省2000元培训费. 联系QQ 80766391

thanks a lot very good

最新思科ccna(200-125)考试认证题库在这里下载 2016年最新更新http://bbs.vlan5.com/thread-15970-1-1.html

轻松3步 无限次刷金币 每次200 只需20秒 http://bbs.vlan5.com/thread-14477-1-1.html

感谢楼主 感谢攻城狮论坛 每天签到得积分(连续签到金币翻倍) 希望越办越好

你知道么? 加2000人思科华为网络技术讨论群2258097 然后私聊群主 可以免费回答学习 工作中遇到的问题

攻城狮论坛一直为会员提供经典/最新的资料&视频&题库,一直为大家提供力所能及的服务和帮助

学习一下，谢谢

下载思科ccna ccnp ccie认证 资料 题库 免费视频教程 就来攻城狮论坛就对了 http://bbs.vlan5.com