(ISC)² CC 問題練習

Question No : 1
A set of security controls or system settings used to ensure uniformity of configuration through the IT environment?

• A.Patches
• B.Inventory
• C.Baseline
• D.Policy

答えを確認する

正解:

Question No : 2
Which is the component of a Business Continuity (BC) plan

• A.Immediate response procedures and checklists
• B.Notification systems and call trees for alerting personnel
• C.Guidance for management, including designation of authority for specific managers
• D.ALL

答えを確認する

正解:

Question No : 3
The Bell and LaPadula access control model is a form of

• A.RBAC
• B.MAC
• C.DAC
• D.ABAC

答えを確認する

正解:

Question No : 4
What does Criticality represents?

• A.The need for consultation with the involved business ensure critical systems are identified and available
• B.The importance an organization gives to data or an information system in performing its operations or achieving its mission
• C.The need for security professional to ensure the appropriate levels of availavility are provided
• D.All of the above

答えを確認する

正解:

Question No : 5
Events with a negative consequence, such as system crashes, network packet floods, unauthorized use of system privileges, defacement of a web page or execution of malicious code that destroys data.

• A.Breach
• B.Incident
• C.Adverse Event
• D.Exploit

答えを確認する

正解:

Question No : 6
Removing the design belief that the network has any trusted space. Security is managed at eachpossible level, representing the most granular asset. Micro segmentation of workloads is a tool of the model.

• A.Zero Trust
• B.DMZ
• C.VLAN
• D.Micro Segmentation

答えを確認する

正解:

Question No : 7
A________creates an encrypted tunnel to protect your personal data and communications

• A.HTTPS
• B.VPN
• C.Anti-virus
• D.IDS

答えを確認する

正解:

Question No : 8
The harmonization of automated computing tasks, providing a consolidated and reusable workflow

• A.Cloud Orchestration
• B.Cloud Manager
• C.Cloud broker
• D.Cloud Controller

答えを確認する

正解:

Question No : 9
What are registered port used for

• A.Common protocols at the core of TCP/IP model
• B.Used for web servers
• C.Used for in housed or opensource applications
• D.Proprietary applications from vendors and develope

答えを確認する

正解:

Question No : 10
Communication between end systems is encrypted using a key, often known as________?

• A.Temporary Key
• B.Section Key
• C.Public Key
• D.Session Key

答えを確認する

正解:

Question No : 11
What is IPSEC reply attack

• A.An attack where an attacker modifies packets in transit
• B.An attack where an attacker eavesdrops on network traffic
• C.An attack where an attacker overloads a network with traffic
• D.An attack where an attacker attempts to inject packets in an existing sessio

答えを確認する

正解:

Question No : 12
Juli is listening to network traffic and capturing passwords as they are sent to the authentication server. She plans to use the passwords as part of a future attack.
What type of attack is this?

• A.Brute-force attack
• B.Dictionary attack
• C.Social engineering attack
• D.Replay attack

答えを確認する

正解:

Question No : 13
What is the primary goal of the incident management team in the organization

• A.Reduce the impact and resore services
• B.Gathering and analyzing information
• C.Conducting Leason learn meeting
• D.RCA of the impact

答えを確認する

正解:

Question No : 14
What is the recommended range of temperature for optimized maximum uptime and hardware life in a data center?

• A.62 F to 69 F
• B.64 F to 81 F
• C.82 F to 90 F
• D.91 F to 100 F

答えを確認する

正解:

Question No : 15
A measure of the degree to which an organization depends on the information or information system for the success of a mission or of a business function.

• A.Availability
• B.Criticality
• C.Authorization
• D.Confidentiality

答えを確認する

正解: