CSSLP 試験問題を無料オンラインアクセス

Which of the following methods does the Java Servlet Specification v2.4 define in the HttpServletRequest interface that control programmatic security? Each correct answer represents a complete solution. Choose all that apply.

• A.getUserPrincipal()
• B.getCallerIdentity()
• C.getRemoteUser()
• D.isUserInRole()

Which of the following are the basic characteristics of declarative security? Each correct answer represents a complete solution. Choose all that apply.

• A.It is a container-managed security.
• B.The security policies are applied at the deployment time.
• C.It has a runtime environment.
• D.All security constraints are stated in the configuration files.

ISO 27003 is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). Which of the following elements does this standard contain? Each correct answer represents a complete solution. Choose all that apply.

• A.Inter-Organization Co-operation
• B.CSFs (Critical success factors)
• C.Guidance on process approach
• D.ystem requirements for certification bodies Managements
• E.Terms and Definitions
• F.Information Security Risk Treatment

Which of the following elements of the BCP process emphasizes on creating the scope and the additional elements required to define the parameters of the plan?

• A.Business continuity plan development
• B.Plan approval and implementation
• C.Business impact analysis
• D.Scope and plan initiation

The organization level is the Tier 1 and it addresses risks from an organizational perspective. What are the various Tier 1 activities? Each correct answer represents a complete solution. Choose all that apply.

• A.The techniques and methodologies an organization plans to employ, to evaluate information system-related security risks.
• B.The organization plans to use the degree and type of oversight, to ensure that the risk management strategy is being effectively carried out.
• C.The level of risk tolerance.
• D.The RMF primarily operates at Tier 1.