EC-Council 312-97 問題集 練習問題・模擬試験｜日本語版＆英語版対応

サンプル問題 1： Scenario: You are tasked with reviewing the security posture of a project that uses multiple open-source libraries. What is the first step you should take to assess the security risks of these libraries?

• A: Perform an automated vulnerability scan of the libraries.
• B: Run static code analysis on the libraries’ source code.
• C: Rely on community feedback and star ratings to assess library security.
• D: Review the open-source licenses to ensure compliance.

サンプル問題 2： During a compliance audit, it was found that several environments do not meet HIPAA’s requirements for secure data storage. What should be the next step to ensure compliance across the development pipeline?

• A: Restrict compliance checks to the production environment only to ensure smooth operation.
• B: Implement end-to-end encryption for all environments handling sensitive data.
• C: Perform post-deployment reviews once per quarter to identify and address compliance gaps.
• D: Delay compliance checks until the final pre-production stage to minimize delays.

サンプル問題 3： Scenario: Your organization is developing a web-based application that will handle sensitive data. How can you ensure that security is incorporated into the design and development phases?

• A: Focus on end-user security awareness training during the rollout phase.
• B: Rely on manual code reviews to ensure secure coding practices.
• C: Schedule a security audit once the application is near completion.
• D: Integrate static code analysis and threat modeling into the early stages of development.