156-110 無料問題集「CheckPoint Check Point Certified Security Principles Associate (CCSPA)」

（A）Using generic user names and passwords increases system security and reliability.

（B）If users do not have individual login names, processes can automatically run with root/administrator access.

（C）By using individual login names and passwords, user actions can be traced.

（D）A generic user name and password for users and security administrators provides anonymity, which prevents useful logging and auditing.

（E）Using separate accounts for each user reduces resource consumption, particularly disk space.

（A）Most small businesses employ a full-time information-technology staff.

（B）Security budgets are very small.

（C）Resources are available as needed.

（D）Most employees have experience with information security.

（E）Small businesses have security personnel on staff.

（A）Internal users try to gain unauthorized access to information assets outside the organizational perimeter.

（B）Internal users perform inappropriate acts on assets to which they have been given rights or permissions.

（C）External users attempt to access public resources.

（D）External intruders attempt exploitation of vulnerabilities, to remove their own access.

（E）External-intrusion attempts from sources outside the LAN are not granted permissions or rights to an organization's information assets.

（A）Transposition cipher

（B）Espionage

（C）Arithmancy

（D）Key exchange

（E）Steganography

（A）Mandatory

（B）Discretionary

（C）Hybrid

（D）Nondiscretionary

（E）Role-based

（A）Nothing

（B）Do not log and pass the traffic.

（C）Do not log and drop the traffic.

（D）Log and pass the traffic.

（E）Log and drop the traffic.

（A）Deferring action; action waiting until a later date

（B）Manual procedures; alternative solution to technology available

（C）Delegating risk to another entity, such as an insurer

（D）Reciprocal agreements with another organization

（E）Doing nothing; no action taken to recover the technology

（A）HTTP

（B）FTP

（C）PVP

（D）SMTP

（E）IRC

（A）Unauthorized access to a facility

（B）Social engineering

（C）Property theft

（D）Network Intrusion Detection Systems

（E）Dumpster diving

（A）Three-factor authentication

（B）Mandatory sign-on

（C）Hybrid access control

（D）Role-based access control

（E）Single sign-on