CISSP-ISSMP 試験問題を無料オンラインアクセス

Which document formally authorizes a project or security initiative and grants the project manager authority to apply organizational resources?

• A.Statement of Work (SOW)
• B.Risk Register
• C.Business Case
• D.Project Charter

During a tabletop exercise, participants discuss their roles and responses to a simulated incident without actually activating systems. This is an example of which testing type?

• A.Simulation test
• B.Full interruption test
• C.Structured walkthrough (tabletop) test
• D.Parallel test

Which of the following BEST describes why "dependency mapping" is a critical input to contingency planning?

• A.Dependency mapping replaces the need for an RTO
• B.Understanding upstream/downstream dependencies between systems and processes ensures recovery sequencing avoids restoring a system before its prerequisites are available
• C.Dependencies rarely change and require no periodic updates
• D.Dependency mapping is only relevant to network diagrams

Which of the following BEST describes the purpose of a "data classification policy" working together with a "data handling standard"?

• A.They serve unrelated purposes
• B.Classification defines sensitivity levels; the handling standard specifies the required controls (encryption, access, transmission) for each level
• C.Classification only applies to paper records
• D.Handling standards replace the need for classification

Which of the following models uses a directed graph to specify the rights that a subject can transfer to an object or that a subject can take from another subject?

• A.Biba Integrity Model
• B.Access Matrix
• C.Take-Grant Protection Model
• D.Bell-LaPadula Model