CISSP 무료 덤프문제 온라인 액세스

Why is it important that senior management clearly communicates the formal Maximum Tolerable Downtime (MTD) decision?

• A.To provide a formal declaration from senior management as required by internal audit to demonstrate sound business practices
• B.To provide each manager with precise direction on selecting an appropriate recovery alternative
• C.To demonstrate to the board of directors that senior management is committed to continuity recovery efforts
• D.To demonstrate to the regulatory bodies that the company takes business continuity seriously

Which of the following actions should be taken by a security professional when a mission critical computer network attack is suspected?

• A.Turn the rooter off, perform forensic analysis, apply the appropriate fin, and log incidents.
• B.Prioritize, report, and investigate the occurrence.
• C.Isolate the network, log an independent report, fix the problem, and redeploy the computer.
• D.Isolate the network, install patches, and report the occurrence.

Which of the following BEST describes the purpose of "Role Mining" in an RBAC implementation?

• A.Encrypting role definitions for storage
• B.Auditing role assignments after a security breach
• C.Identifying and exploiting vulnerabilities in role assignments
• D.Analyzing existing user access patterns to derive appropriate roles and permission groupings

Which one of the following activities would present a significant security risk to organizations when employing a Virtual Private Network (VPN) solution?

• A.Remote users with administrative rights
• B.VPN bandwidth
• C.Users with Internet Protocol (IP) addressing conflicts
• D.Simultaneous connection to other networks

A client has reviewed a vulnerability assessment report and has stated it is inaccurate. The client states that the vulnerabilities listed are not valid because the host's Operating system (OS) was not properly detected. Where in the vulnerability assessment process did the error MOST likely occur?

• A.Detection
• B.Enumeration
• C.Reporting
• D.Discovery