(ISC)2 CISSP-ISSMP 問題練習

Question No : 1
Which of the following enables an inventor to legally enforce his right to exclude others from using his invention?

• A.Spam
• B.Patent
• C.Artistic license
• D.Phishing

答えを確認する

正解:

Question No : 2
You are documenting your organization's change control procedures for project management.
What portion of the change control process oversees features and functions of the product scope?

• A.Configuration management
• B.Product scope management is outside the concerns of the project.
• C.Scope change control system
• D.Project integration management

答えを確認する

正解:

Question No : 3
Mark works as a security manager for SofTech Inc. He is working in a partially equipped office space which contains some of the system hardware, software, telecommunications, and power sources.
In which of the following types of office sites is he working?

• A.Mobile site
• B.Warm site
• C.Cold site
• D.Hot site

答えを確認する

正解:

Question No : 4
Which of the following is a process of monitoring data packets that travel across a network?

• A.Password guessing
• B.Packet sniffing
• C.Shielding
• D.Packet filtering

答えを確認する

正解:

Question No : 5
You are advising a school district on disaster recovery plans. In case a disaster affects the main IT centers for the district they will need to be able to work from an alternate location.
However, budget is an issue.
Which of the following is most appropriate for this client?

• A.Cold site
• B.Off site
• C.Hot site
• D.Warm site

答えを確認する

正解:

Question No : 6
Which of the following is a set of exclusive rights granted by a state to an inventor or his assignee for a fixed period of time in exchange for the disclosure of an invention?

• A.Patent
• B.Utility model
• C.Snooping
• D.Copyright

答えを確認する

正解:

Question No : 7
James works as a security manager for SoftTech Inc. He has been working on the continuous process improvement and on the ordinal scale for measuring the maturity of the organization involved in the software processes.
According to James, which of the following maturity levels of software CMM focuses on the continuous process improvement?

• A.Repeatable level
• B.Defined level
• C.Initiating level
• D.Optimizing level

答えを確認する

正解:

Question No : 8
Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?

• A.The Service Level Manager
• B.The Configuration Manager
• C.The IT Security Manager
• D.The Change Manager

答えを確認する

正解:

Question No : 9
Which of the following is the correct order of digital investigations Standard Operating Procedure (SOP)?

• A.Initial analysis, request for service, data collection, data reporting, data analysis
• B.Initial analysis, request for service, data collection, data analysis, data reporting
• C.Request for service, initial analysis, data collection, data analysis, data reporting
• D.Request for service, initial analysis, data collection, data reporting, data analysis

答えを確認する

正解:

Question No : 10
The goal of Change Management is to ensure that standardized methods and procedures are used for efficient handling of all changes.
Which of the following are Change Management terminologies? Each correct answer represents a part of the solution. Choose three.

• A.Request for Change
• B.Service Request Management
• C.Change
• D.Forward Schedule of Changes

答えを確認する

正解:

Question No : 11
Which of the following policies helps reduce the potential damage from the actions of one person?

• A.CSA
• B.Risk assessment
• C.Separation of duties
• D.Internal audit

答えを確認する

正解:

Question No : 12
Which of the following Acts enacted in United States amends Civil Rights Act of 1964, providing technical changes affecting the length of time allowed to challenge unlawful seniority provisions, to sue the federal government for discrimination and to bring age discrimination claims?

• A.PROTECT Act
• B.Sexual Predators Act
• C.Civil Rights Act of 1991
• D.The USA Patriot Act of 2001

答えを確認する

正解:

Question No : 13
Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

• A.Direct
• B.Circumstantial
• C.Incontrovertible
• D.Corroborating

答えを確認する

正解:

Question No : 14
Change Management is used to ensure that standardized methods and procedures are used for efficient handling of all changes.
Who decides the category of a change?

• A.The Problem Manager
• B.The Process Manager
• C.The Change Manager
• D.The Service Desk
• E.The Change Advisory Board

答えを確認する

正解:

Question No : 15
Which of the following statements is related with the first law of OPSEC?

• A.If you are not protecting it (the critical and sensitive information), the adversary wins!
• B.If you don't know what to protect, how do you know you are protecting it?
• C.If you don't know about your security resources you could not protect your network.
• D.If you don't know the threat, how do you know what to protect?

答えを確認する

正解: