26年9月CISP 英文【最新题库】国家注册信息安全专业人员cisp-英文-带解析

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

Which one of the following elements of information is not considered a direct identifier that would trigger most United States (U.S.) state data breach laws?

What type of cloud storage is typically used to provide disk volumes for use with virtual server instances that will store important long-term data?

You are the security manager for a small retailer engaged in e-commerce. A large part of your sales is transacted through the use of credit and debit cards and you need to store these numbers for use in future transactions.You have determined that the costs of maintaining an encrypted storage capability in order to meet compliance requirements are prohibitive. What other technology can you useinstead to meet those regulatory needs?

Which of the following concepts refers to a cloud customer paying only for the resources and offerings they use within a cloud environment, and only for the duration that they are consuming them?

A component failure in the primary HVAC system leads to a high temperature alarm in the datacenter that Kim manages. After resolving the issue, what should Kim consider to prevent future issues like this?

What type of storage structure does object storage employ to maintain files?

Aisha’s organization has deployed a cloud application security broker. Which of the follow- ing is not a typical purpose for a CASB to be deployed?

Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?

The company that Eric works for uses an authentication process that allows Eric to login once and then use a variety of systems and services the organization provides. What tech- nology is the company using?

All policies within the organization should include a section that includes all of the following, except

Isaac wants to ensure that his cloud service provider is using cryptographic systems that meet widely accepted standards. What U.S. government standard should he expect his provider to comply with their cryptographic systems?

Jason wants to use multifactor authentication. Which of the following lists a valid multi- factor set?

Warren is helping his organization build a new datacenter that will support a cloud ser-vice they provide to their customers. Which one of the following is a reasonable minimum amount of time to expect the uninterruptible power supply (UPS) to provide power to the systems in the datacenter?

The Cloud Security Alliance’s Cloud Incident Response (CIR) framework documents typ- ical breakdowns for customer versus cloud provider responsibilities in incident response, including pointing to cloud providers as being responsible for almost all risks in an SaaS environment. In an IaaS environment, who is responsible for network risks?

Bobbi is investigating a security incident and discovers that an attacker began with a normaluser account but managed to exploit a system vulnerability to provide that account withadministrative rights. What type of attack took place under the STRIDE threat model?

Isabelle wants to retrieve forensic data from her cloud provider’s native logging facility. What technique is most likely to be supported for this type of data access?

When considering cloud data backup strategies (i.e., whether you are making backups at the block, file, or database level), which element of your organization’s BC/DR plan will be most affected by your choice?

Jaime wants to explain the technology that allows cloud vendors to sell access to portions of their underlying hardware in the form of compute. What building block technology provides the foundation for this?

As part of an incident response process, Jack wants to validate the integrity of systeminstances running in his cloud environment. What can he do to quickly and efficiently check that the virtual machine images have not been modified?

What concept from the field of digital forensics requires that you document who handles evidence from the time of collection until the time of use in court?