무료 온라인 액세스 ISC.CISSP-KR.v2026-08-20.q862 모의 시험 (Page 54)

CISSP-KR 문제 261

다음 중 "Egress Point Content-Based DLP"의 목적을 가장 잘 설명하는 것은 무엇입니까?
"컨텍스트 기반 DLP"?

A. 콘텐츠 기반 DLP는 파일 메타데이터만 검사하는 반면, 컨텍스트 기반 DLP는 파일 콘텐츠만 검사합니다.

B. 콘텐츠 기반 DLP는 실제 데이터 내용(예: 신용 카드 번호 패턴 일치)을 검사하는 반면, 컨텍스트 기반 DLP는 발신자, 수신자, 애플리케이션 및 목적지와 같은 컨텍스트 요소를 고려합니다.

C. 콘텐츠 기반 DLP와 컨텍스트 기반 DLP는 동일한 접근 방식입니다.

D. 두 접근 방식 모두 포괄적인 DLP 전략에서 함께 사용할 수 없습니다.

CISSP-KR 문제 262

한 보안 실무자가 재해 복구(DR) 및 비즈니스 연속성을 위한 모범 사례를 모델링하도록 요청받았습니다. 실무자는 비즈니스 연속성 정책을 수립하기 위해 공식 위원회가 필요하다고 결정했습니다. 다음 중 비즈니스 연속성 개발의 이 단계를 가장 잘 설명한 것은?

A. 프로젝트 착수 및 관리

B. 위험 평가 및 통제

C. 비즈니스 연속성 계획(BCP) 개발 및 구현

D. 비즈니스 영향 분석(BIA)

정답: A

Project Initiation and Management is the first stage of business continuity development, where the scope, objectives, and goals of the business continuity program are defined and the roles and responsibilities of the business continuity team are assigned. This stage also involves establishing a formal committee to oversee and approve the business continuity policy, which is a document that outlines the principles, standards, and guidelines for the business continuity program. The committee should consist of senior management and key stakeholders from different business units and functions, as well as external experts and consultants if needed. The committee should also ensure that the business continuity program is aligned with the organizational strategy, culture, and values, and that it complies with the relevant laws, regulations, and best practices. Risk Evaluation and Control is the second stage of business continuity development, where the potential threats, vulnerabilities, impacts, and likelihoods of the business processes and resources are identified and analyzed, and the appropriate controls and countermeasures are implemented and tested to reduce the risks to an acceptable level.
Developing and Implementing Business Continuity Plans (BCP) is the third stage of business continuity development, where the specific plans and procedures for ensuring the continuity and recovery of the critical business functions and resources are developed and implemented, based on the results of the risk evaluation and control and the business impact analysis. Business Impact Analysis (BIA) is the fourth stage of business continuity development, where the criticality, dependencies, and recovery requirements of the business processes and resources are determined and prioritized, based on the criteria of maximum tolerable downtime, recovery time objective, recovery point objective, and minimum operating level.

CISSP-KR 문제 263

어떤 보안 액세스 정책에 파일 또는 오브젝트에 대한 사용자의 액세스를 판별하기 위해 시스템에서 사용하는 고정 보안 속성이 포함되어 있습니까?

A. 필수 액세스 제어 (MAC)

B. 액세스 제어 목록 (ACL)

C. DAC (임의 액세스 제어)

D. 인증 된 사용자 컨트롤

정답: A

The security access policy that contains fixed security attributes that are used by the system to determine a user's access to a file or object is Mandatory Access Control (MAC). MAC is a type of access control model that assigns permissions to users and objects based on their security labels, which indicate their level of sensitivity or trustworthiness. MAC is enforced by the system or the network, rather than by the owner or the creator of the object, and it cannot be modified or overridden by the users. MAC can provide some benefits for security, such as enhancing the confidentiality and the integrity of the data, preventing unauthorized access or disclosure, and supporting the audit and compliance activities. MAC is commonly used in military or government environments, where the data is classified according to its level of sensitivity, such as top secret, secret, confidential, or unclassified. The users are granted security clearance based on their level of trustworthiness, such as their background, their role, or their need to know. The users can only access the objects that have the same or lower security classification than their security clearance, and the objects can only be accessed by the users that have the same or higher security clearance than their security classification. This is based on the concept of no read up and no write down, which requires that a user can only read data of lower or equal sensitivity level, and can only write data of higher or equal sensitivity level. MAC contains fixed security attributes that are used by the system to determine a user's access to a file or object, by using the following methods:
Assigning security labels to the users and the objects, which consist of a security classification and a set of security categories. The security classification indicates the level of sensitivity of the data, such as top secret, secret, confidential, or unclassified. The security categories indicate the subject matter or the scope of the data, such as nuclear, military, or intelligence. The security labels are attached to the users and the objects as metadata or tags, and they cannot be changed or removed by the users.
Comparing the security labels of the users and the objects, using a reference monitor or an access control matrix. The reference monitor is a software component that intercepts and evaluates the requests for access to the objects, and grants or denies the access based on the security labels of the users and the objects. The access control matrix is a data structure that lists the users and the objects, and the permissions that each user has on each object, based on the security labels of the users and the objects.

CISSP-KR 문제 264

다음 중 통신 링크의 이중화를 제공하는 가장 좋은 솔루션은 무엇입니까?

A. 동일한 통신 사업자로부터 여러 링크를 제공합니다.

B. 통신 링크가 한 위치에서 네트워크에 연결되도록 합니다.

C. 통신 링크가 여러 위치에서 네트워크에 연결되는지 확인하십시오.

D. 여러 통신 사업자의 여러 링크를 제공합니다.

CISSP-KR 문제 265

새로운 컴퓨터 시설 부지를 선정할 때 다음 위험 요소 중 가장 중요도가 낮은 것은 무엇일까요?

A. 범죄에 대한 취약성

B. 인접 건물 및 사업체

C. 항공기 비행 경로와의 근접성

D. 자연재해에 대한 취약성

다른 버전: 4537ISC.CISSP-KR.v2026-05-22.q625; 3106ISC.CISSP-KR.v2026-03-24.q787

최근 업로드: 149Microsoft.DP-700-KR.v2026-08-20.q47; 290ISC.CISSP-KR.v2026-08-20.q862; 196Microsoft.SC-100-KR.v2026-08-20.q141; 237Microsoft.AZ-305-KR.v2026-08-20.q223; 851IIA.IIA-CIA-Part1-KR.v2026-08-19.q374; 1343IIA.IIA-CIA-Part3-KR.v2026-08-19.q374; 182Microsoft.DP-700-KR.v2026-08-19.q59; 235AMP.CRL.v2026-08-18.q46; 894Microsoft.AZ-305-KR.v2026-08-17.q162; 236IIA.IAA-IAP-KR.v2026-08-17.q41