CISSP-KR 문제 516
디지털 인증서를 배포 할 때 다음 중 가장 중요한 것은 무엇입니까?
정답: B
According to the CISSP All-in-One Exam Guide, the most important thing when deploying digital certificates is to establish a certificate life cycle management framework. A digital certificate is a digital document that binds the identity and public key of an entity, such as a person, device, or organization, and is issued and signed by a trusted authority, such as a Certificate Authority (CA).
A certificate life cycle management framework is a set of policies, processes, and procedures that define how the digital certificates are created, issued, distributed, stored, used, renewed, revoked, and expired. A certificate life cycle management framework helps to ensure that the digital certificates are valid, current, and trustworthy, and that they meet the security and operational requirements of the organization and the users. A certificate life cycle management framework also helps to prevent or mitigate the risks and challenges associated with the digital certificates, such as certificate expiration, compromise, misuse, or fraud. Validating compliance with X.509 digital certificate standards is not the most important thing when deploying digital certificates, although it is a good practice to follow. X.509 is a standard that defines the format and structure of the digital certificates, as well as the protocols and services for certificate management, such as Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP). Validating compliance with X.509 helps to ensure that the digital certificates are interoperable and compatible with different systems and applications, but it does not address the entire life cycle of the digital certificates. Using a third- party CA is not the most important thing when deploying digital certificates, although it may be a convenient and cost-effective option for some organizations. A third-party CA is an external entity that provides the service of issuing and managing the digital certificates for other entities, such as customers or partners. Using a third- party CA may reduce the complexity and overhead of maintaining an internal CA, but it also introduces some challenges and risks, such as dependency, trust, liability, and compliance. Using no less than 256-bit strength encryption when creating a certificate is not the most important thing when deploying digital certificates, although it is a recommended practice to follow. The encryption strength of a certificate refers to the length and complexity of the encryption key that is used to protect the certificate data and signature. Using no less than 256-bit strength encryption helps to ensure that the certificate is resistant to brute-force attacks and other cryptographic attacks, but it does not address the entire life cycle of the digital certificates.
A certificate life cycle management framework is a set of policies, processes, and procedures that define how the digital certificates are created, issued, distributed, stored, used, renewed, revoked, and expired. A certificate life cycle management framework helps to ensure that the digital certificates are valid, current, and trustworthy, and that they meet the security and operational requirements of the organization and the users. A certificate life cycle management framework also helps to prevent or mitigate the risks and challenges associated with the digital certificates, such as certificate expiration, compromise, misuse, or fraud. Validating compliance with X.509 digital certificate standards is not the most important thing when deploying digital certificates, although it is a good practice to follow. X.509 is a standard that defines the format and structure of the digital certificates, as well as the protocols and services for certificate management, such as Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP). Validating compliance with X.509 helps to ensure that the digital certificates are interoperable and compatible with different systems and applications, but it does not address the entire life cycle of the digital certificates. Using a third- party CA is not the most important thing when deploying digital certificates, although it may be a convenient and cost-effective option for some organizations. A third-party CA is an external entity that provides the service of issuing and managing the digital certificates for other entities, such as customers or partners. Using a third- party CA may reduce the complexity and overhead of maintaining an internal CA, but it also introduces some challenges and risks, such as dependency, trust, liability, and compliance. Using no less than 256-bit strength encryption when creating a certificate is not the most important thing when deploying digital certificates, although it is a recommended practice to follow. The encryption strength of a certificate refers to the length and complexity of the encryption key that is used to protect the certificate data and signature. Using no less than 256-bit strength encryption helps to ensure that the certificate is resistant to brute-force attacks and other cryptographic attacks, but it does not address the entire life cycle of the digital certificates.
CISSP-KR 문제 517
다음 중 다른 실행 도메인 내에서 주어진 주제에 사용 가능한 오브젝트 범위를 제한하는 데 사용되는 PRIMARY 메커니즘은 무엇입니까?
정답: A
Process isolation is the primary mechanism used to limit the range of objects available to a given subject within different execution domains. A process is a program or an application that is running on a system. A process has a subject, which is the active entity that requests access to an object, and an object, which is the passive entity that contains or receives information. An execution domain is the environment or the context in which a process runs, such as the user mode or the kernel mode. Process isolation is a technique that separates the processes from each other and prevents them from accessing or interfering with each other's memory, resources, or data. Process isolation can limit the range of objects available to a given subject within different execution domains, as it restricts the access of the subject to only the objects that belong to the same process or the same execution domain. Process isolation can enhance the security and the stability of the system, as it prevents unauthorized or accidental access, modification, or deletion of the objects, and reduces the impact of errors or failures of the processes.
CISSP-KR 문제 518
조직의 이기종 엔드포인트 네트워크에 제어 기능을 구현할 때 다음 사항이 매우 중요합니다.
정답: C
In a heterogeneous network, where different types of devices (e.g., Windows, MacOS, Linux, mobile devices, etc.) are used, it's crucial to ensure consistency in security controls across all systems. This can help prevent vulnerabilities that arise from differing security postures between devices. By implementing common security software components (such as antivirus, endpoint detection, encryption, etc.) across all hosts, an organization can achieve:
Consistent threat protection across all types of endpoints.
Centralized monitoring and reporting of security events.
Standardized configurations that reduce the chances of misconfigurations and gaps in security coverage.
Consistent threat protection across all types of endpoints.
Centralized monitoring and reporting of security events.
Standardized configurations that reduce the chances of misconfigurations and gaps in security coverage.
CISSP-KR 문제 519
다음 기술 중 맬웨어 방지 소프트웨어에 대한 최상의 대안을 제공하는 기술은 무엇입니까?
정답: B
The technology that would provide the best alternative to anti-malware software is application whitelisting. Anti-malware software is a software program that detects, prevents, and removes malware, such as viruses, worms, trojans, ransomware, or spyware, from a computer or a network. Anti-malware software usually relies on signature-based detection, which means that it compares the files or processes on the computer or the network with a database of known malware signatures, and blocks or deletes the files or processes that match the signatures.
However, anti-malware software has some limitations and drawbacks, such as being unable to detect new or unknown malware, being vulnerable to evasion or tampering techniques, consuming system resources and bandwidth, or requiring frequent updates and maintenance.
Application whitelisting is a technology that allows only authorized or trusted applications to run on a computer or a network, and blocks or denies all other applications. Application whitelisting can provide a better alternative to anti- malware software, as it can prevent malware from executing or infecting the computer or the network, regardless of whether the malware is known or unknown, or whether it uses evasion or tampering techniques. Application whitelisting can also improve the performance and stability of the computer or the network, as it reduces the system overhead and the network traffic. However, application whitelisting also has some challenges and risks, such as being difficult to implement and manage, being incompatible with some applications or systems, or being susceptible to bypass or exploitation methods. Host-based Intrusion Detection Systems (HIDS), host-based firewalls, and application sandboxing are not the best alternatives to anti-malware software, as they are either not as effective or not as efficient as application whitelisting, or they serve different purposes or functions than anti-malware software.
However, anti-malware software has some limitations and drawbacks, such as being unable to detect new or unknown malware, being vulnerable to evasion or tampering techniques, consuming system resources and bandwidth, or requiring frequent updates and maintenance.
Application whitelisting is a technology that allows only authorized or trusted applications to run on a computer or a network, and blocks or denies all other applications. Application whitelisting can provide a better alternative to anti- malware software, as it can prevent malware from executing or infecting the computer or the network, regardless of whether the malware is known or unknown, or whether it uses evasion or tampering techniques. Application whitelisting can also improve the performance and stability of the computer or the network, as it reduces the system overhead and the network traffic. However, application whitelisting also has some challenges and risks, such as being difficult to implement and manage, being incompatible with some applications or systems, or being susceptible to bypass or exploitation methods. Host-based Intrusion Detection Systems (HIDS), host-based firewalls, and application sandboxing are not the best alternatives to anti-malware software, as they are either not as effective or not as efficient as application whitelisting, or they serve different purposes or functions than anti-malware software.
CISSP-KR 문제 520
조직이 보안 권한 부여 절차를 수행하는 주된 이유는 다음과 같습니다.
정답: A
The main reason an organization conducts a security authorization process is to force the organization to make conscious risk decisions. A security authorization process is a process that evaluates and approves the security of an information system or a product before it is deployed or used. A security authorization process involves three steps: security categorization, security assessment, and security authorization. Security categorization is the step of determining the impact level of the information system or product on the confidentiality, integrity, and availability of the information and assets. Security assessment is the step of testing and verifying the security controls and measures implemented on the information system or product. Security authorization is the step of granting or denying the permission to operate or use the information system or product based on the security assessment results and the risk acceptance criteria. The security authorization process forces the organization to make conscious risk decisions, as it requires the organization to identify, analyze, and evaluate the risks associated with the information system or product, and to decide whether to accept, reject, mitigate, or transfer the risks.
- 최근 업로드
- 138PMI.PMP-KR.v2026-08-21.q927
- 129PMI.PMP-KR.v2026-08-21.q86
- 140Microsoft.DP-420-KR.v2026-08-21.q96
- 122Microsoft.AZ-900-KR.v2026-08-21.q220
- 151Microsoft.DP-700-KR.v2026-08-20.q47
- 419ISC.CISSP-KR.v2026-08-20.q862
- 201Microsoft.SC-100-KR.v2026-08-20.q141
- 245Microsoft.AZ-305-KR.v2026-08-20.q223
- 879IIA.IIA-CIA-Part1-KR.v2026-08-19.q374
- 1364IIA.IIA-CIA-Part3-KR.v2026-08-19.q374
[×]
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISC.CISSP-KR.v2026-08-20.q862 모의시험 시험자료를 다운 받으세요.