CISSP-KR 문제 76
조직에서 네트워크 경계를 통해 IM(인스턴트 메시징) 통신을 보호하려고 합니다. 다음 중 가장 중요한 과제는 무엇입니까?
정답: C
The most significant challenge when trying to secure instant messaging (IM) communications through the network perimeter is that IM clients can utilize random port numbers. IM is a form of real-time communication that allows users to exchange text, voice, video, or other data over the internet. IM clients are applications that enable users to connect to IM servers or networks, such as Skype, WhatsApp, or Telegram. IM clients can pose a security risk for the network perimeter, which is the boundary between the internal and external networks, where firewalls, routers, or other devices are used to filter and control the network traffic. IM clients can utilize random port numbers, which are the endpoints of communication between the source and destination devices, to bypass the network perimeter security. IM clients can dynamically change the port numbers they use, or use nonstandard or unregistered port numbers, to evade the detection or blocking by the network perimeter devices. IM clients can also use port hopping, which is the technique of switching the port numbers frequently, to avoid the network perimeter security. IM clients can also tunnel their traffic through other protocols, such as HTTP or HTTPS, which are usually allowed by the network perimeter devices, to conceal their communication.
CISSP-KR 문제 77
방위 산업 내 회사는 정부 고객의 CUI(Controlled Unclassified Information) 암호화에 대한 계약 요구 사항을 준수하도록 지시받았습니다. 가장 효율적이고 비용 효율적인 방식으로 저장 데이터를 보호하는 방법을 나타내는 암호화 전략은 무엇입니까?
정답: B
The encryption strategy that represents how to protect data at rest in the most efficient and cost- effective manner is to perform logical separation of program information, using virtualized storage solutions with built-in encryption at the virtualization layer. Data at rest is a term that describes the data or the information that are stored or archived on a system or a device, such as a hard disk, a flash drive, or a tape. Data at rest can pose a security risk, as it can be accessed or stolen by unauthorized parties, such as hackers, insiders, or thieves, and as it can compromise the confidentiality, integrity, or availability of the data or the information. Encryption is a type of security technique that involves transforming the data or the information into an unreadable or unintelligible form, using a key or an algorithm, to prevent or mitigate unauthorized access or disclosure of the data or the information. Encryption can be applied to data at rest, to protect the data or the information from potential threats, such as eavesdropping, interception, modification, or deletion. Logical separation of program information, using virtualized storage solutions with built-in encryption at the virtualization layer, is an encryption strategy that involves dividing or isolating the data or the information into different logical units or segments, using software or virtualization, rather than physical or hardware, and applying encryption to the data or the information at the virtualization layer, rather than at the application or the disk layer. Logical separation of program information, using virtualized storage solutions with built-in encryption at the virtualization layer, is an encryption strategy that represents how to protect data at rest in the most efficient and cost- effective manner, as it can provide the benefits of both logical separation and encryption, such as security, performance, scalability, and manageability.
CISSP-KR 문제 78
다음 중 중앙 집중식 ID 관리에 대한 설명으로 가장 옳지 않은 것은?
정답: D
The description that best describes centralized identity management is that service providers perform as both the credential and identity provider (IdP). Identity management is a type of process that involves defining, verifying, and managing the identity or the information of the users or the entities that access or use a system or a network, or a service or an application, using various methods, such as credentials, identifiers, or attributes. Identity management can provide various benefits, such as enhancing the security, functionality, or usability of the system or the network, or of the service or the application, and ensuring the compliance or alignment with the standards or regulations. Identity management can be classified into various types, such as centralized, decentralized, or federated. Centralized identity management is a type of identity management that involves using or applying a single or a central authority or entity, such as a server or a database, to control and manage the identity or the information of the users or the entities, and to provide or grant the access or the authorization to the users or the entities, for accessing or using the system or the network, or the service or the application. Centralized identity management can provide various benefits, such as simplicity, consistency, or scalability.
Centralized identity management can also include various roles or functions, such as:
Credential provider: The role or the function that involves creating and issuing the credentials, such as passwords, tokens, or certificates, to the users or the entities, for authenticating or verifying the identity or the information of the users or the entities, and for accessing or using the system or the network, or the service or the application.
Identity provider (IdP): The role or the function that involves storing and managing the identifiers, such as usernames, email addresses, or phone numbers, and the attributes, such as names, roles, or preferences, of the users or the entities, and providing or sharing the identifiers and the attributes of the users or the entities, with the system or the network, or with the service or the application, for identifying or recognizing the users or the entities, and for accessing or using the system or the network, or the service or the application.
Service provider: The role or the function that involves offering or delivering the system or the network, or the service or the application, to the users or the entities, and requesting or receiving the credentials, the identifiers, or the attributes of the users or the entities, from the credential provider or the identity provider, for authenticating, authorizing, or personalizing the users or the entities, and for accessing or using the system or the network, or the service or the application.
Centralized identity management can also include various roles or functions, such as:
Credential provider: The role or the function that involves creating and issuing the credentials, such as passwords, tokens, or certificates, to the users or the entities, for authenticating or verifying the identity or the information of the users or the entities, and for accessing or using the system or the network, or the service or the application.
Identity provider (IdP): The role or the function that involves storing and managing the identifiers, such as usernames, email addresses, or phone numbers, and the attributes, such as names, roles, or preferences, of the users or the entities, and providing or sharing the identifiers and the attributes of the users or the entities, with the system or the network, or with the service or the application, for identifying or recognizing the users or the entities, and for accessing or using the system or the network, or the service or the application.
Service provider: The role or the function that involves offering or delivering the system or the network, or the service or the application, to the users or the entities, and requesting or receiving the credentials, the identifiers, or the attributes of the users or the entities, from the credential provider or the identity provider, for authenticating, authorizing, or personalizing the users or the entities, and for accessing or using the system or the network, or the service or the application.
CISSP-KR 문제 79
운영 프로그램과 그 데이터를 보호하는 가장 효율적인 방법은 무엇일까요?
정답: B
The most efficient way to secure a production program and its data is to harden the application and encrypt the data. Hardening the application means applying the security best practices and standards to the development, testing, deployment, and maintenance of the application, such as input validation, output encoding, error handling, logging, patching, and configuration. Encrypting the data means applying the cryptographic techniques and algorithms to the data at rest and in transit, such as symmetric encryption, asymmetric encryption, hashing, and digital signatures.
These two measures can provide a comprehensive and effective protection for the application and its data against various threats and attacks.
These two measures can provide a comprehensive and effective protection for the application and its data against various threats and attacks.
CISSP-KR 문제 80
담합으로 인해 가장 자주 침해되는 보안 관리 통제는 무엇입니까?
정답: B
Separation of duties is a security management control that divides a critical or sensitive task into two or more parts, and assigns them to different individuals or groups. This reduces the risk of fraud, error, or abuse of authority, as no single person or group can perform the entire task without the cooperation or oversight of others. Separation of duties is most often broken by collusion, which is a secret or illegal agreement between two or more parties to bypass the control and achieve a common goal.
- 최근 업로드
- 138Microsoft.DP-700-KR.v2026-08-20.q47
- 169ISC.CISSP-KR.v2026-08-20.q862
- 161Microsoft.SC-100-KR.v2026-08-20.q141
- 168Microsoft.AZ-305-KR.v2026-08-20.q223
- 797IIA.IIA-CIA-Part1-KR.v2026-08-19.q374
- 1294IIA.IIA-CIA-Part3-KR.v2026-08-19.q374
- 178Microsoft.DP-700-KR.v2026-08-19.q59
- 222AMP.CRL.v2026-08-18.q46
- 890Microsoft.AZ-305-KR.v2026-08-17.q162
- 233IIA.IAA-IAP-KR.v2026-08-17.q41
[×]
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISC.CISSP-KR.v2026-08-20.q862 모의시험 시험자료를 다운 받으세요.