CSSLP無料問題集「ISC Certified Secure Software Lifecycle Professional Practice Test」

質問 1

The service-oriented modeling framework (SOMF) provides a common modeling notation to address alignment between business and IT organizations. Which of the following principles does the SOMF concentrate on? Each correct answer represents a part of the solution. Choose all that apply.

（A）SOA value proposition

（B）Architectural components abstraction

（C）Business traceability

（D）Disaster recovery planning

（E）Software assets reuse

正解：A、B、C、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An assistant from the HR Department calls you to ask the Service Hours & Maintenance Slots for your ERP system. In which document will you most probably find this information?

（A）Service Level Agreement

（B）Release Policy

（C）Service Level Requirements

（D）Underpinning Contract

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You are the project manager for your organization. You are preparing for the quantitative risk analysis. Mark, a project team member, wants to know why you need to do quantitative risk analysis when you just completed qualitative risk analysis. Which one of the following statements best defines what quantitative risk analysis is?

（A）Quantitative risk analysis is the process of numerically analyzing the effect of identified risks on overall project objectives.

（B）Quantitative risk analysis is the process of prioritizing risks for further analysis or action by assessing and combining their probability of occurrence and impact.

（C）Quantitative risk analysis is the planning and quantification of risk responses based on probability and impact of each risk event.

（D）Quantitative risk analysis is the review of the risk events with the high probability and the highest impact on the project objectives.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which of the following disaster recovery tests includes the operations that shut down at the primary site, and are shifted to the recovery site according to the disaster recovery plan?

（A）Simulation test

（B）Full-interruption test

（C）Parallel test

（D）Structured walk-through test

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. What are the different types of policies? Each correct answer represents a complete solution. Choose all that apply.

（A）Advisory

（B）Systematic

（C）Regulatory

（D）Informative

正解：A、C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Penetration tests are sometimes called white hat attacks because in a pen test, the good guys are attempting to break in. What are the different categories of penetration testing? Each correct
answer represents a complete solution. Choose all that apply.

（A）Full-knowledge test

（B）Open-box

（C）Closed-box

（D）Full-box

（E）Partial-knowledge test

（F）Zero-knowledge test

正解：A、B、C、E、F 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Adrian is the project manager of the NHP Project. In her project there are several work packages that deal with electrical wiring. Rather than to manage the risk internally she has decided to hire a vendor to complete all work packages that deal with the electrical wiring. By removing the risk internally to a licensed electrician Adrian feels more comfortable with project team being safe. What type of risk response has Adrian used in this example?

（A）Avoidance

（B）Mitigation

（C）Transference

（D）Acceptance

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?

（A）The data custodian implements the information classification scheme after the initial assignment by the data owner.

（B）The custodian makes the initial information classification assignments, and the operations manager implements the scheme.

（C）The data owner implements the information classification scheme after the initial assignment by the custodian.

（D）The custodian implements the information classification scheme after the initial assignment by the operations manager.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three.

（A）To delegate the responsibility of the data safeguard duties to the custodian.

（B）To perform data restoration from the backups whenever required.

（C）To review the classification assignments from time to time and make alterations as the business requirements alter.

（D）To make original determination to decide what level of classification the information requires, which is based on the business requirements for the safety of the data.

正解：A、C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

DRAG DROP
Drag and drop the appropriate external constructs in front of their respective functions.

正解：

Explanation:

There are two types of compositional constructs: 1.External constructs: The various types of external constructs are as follows: Cascading: In this type of external construct, one system gains the input from the output of another system. Feedback: In this type of external construct, one system provides the input to another system, which in turn feeds back to the input of the first system. Hookup: In this type of external construct, one system communicates with another system as well as with external entities. 2.Internal constructs: The internal constructs include intersection, union, and difference.

質問 11

Fill in the blank with an appropriate phrase. is used to provide security mechanisms for the storage, processing, and transfer of data.

（A）Data classification

正解：A 解答を投票する

Data classification is used to protect the data based on its sensitivity, secrecy, and confidentiality. It provides security mechanisms for storage, processing, and transfer of data. Data classification also helps to verify the effort, funds, and resources allocated to save the data, and controls access to it.

質問 12

At which of the following levels of robustness in DRM must the security functions be immune to widely available tools and specialized tools and resistant to professional tools?

（A）Level 3

（B）Level 2

（C）Level 4

（D）Level 1

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

You work as a Security Manager for Tech Perfect Inc. You have set up a SIEM server for the following purposes: Analyze the data from different log sources Correlate the events among the log entries Identify and prioritize significant events Initiate responses to events if required One of your log monitoring staff wants to know the features of SIEM product that will help them in these purposes. What features will you recommend? Each correct answer represents a complete solution. Choose all that apply.

（A）Transmission confidentiality protection

（B）Graphical user interface

（C）Asset information storage and correlation

（D）Incident tracking and reporting

（E）Security knowledge base

正解：B、C、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CSSLP 無料問題集「ISC Certified Secure Software Lifecycle Professional Practice Test」

弊社を連絡する

関連リンク

トップ試験