CSSLP 무료 덤프문제 온라인 액세스

Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?

• A.The custodian makes the initial information classification assignments, and the operations manager implements the scheme.
• B.The data custodian implements the information classification scheme after the initial assignment by the data owner.
• C.The data owner implements the information classification scheme after the initial assignment by the custodian.
• D.The custodian implements the information classification scheme after the initial assignment by the operations manager.

Which of the following strategies is used to minimize the effects of a disruptive event on a company, and is created to prevent interruptions to normal business activity?

• A.Disaster Recovery Plan
• B.Contingency Plan
• C.Business Continuity Plan
• D.Explanation:
  BCP is a strategy to minimize the consequence of the instability and to allow for the continuation of business processes. The goal of BCP is to minimize the effects of a disruptive event on a company, and is formed to avoid interruptions to normal business activity. Business Continuity Planning (BCP) is the creation and validation of a practiced logistical plan for how an organization will recover and restore partially or completely interrupted critical (urgent) functions within a predetermined time after a disaster or extended disruption. The logistical plan is called a business continuity plan.
• E.Continuity of Operations Plan

Which of the following are examples of the application programming interface (API)? Each correct answer represents a complete solution. Choose three.

• A.Perl
• B.HTML
• C..NET
• D.PHP

Della works as a security engineer for BlueWell Inc. She wants to establish configuration management and control procedures that will document proposed or actual changes to the information system. Which of the following phases of NIST SP 800-37 C&A methodology will define the above task?

• A.Continuous Monitoring
• B.Security Certification
• C.Security Accreditation
• D.Initiation

Which of the following features of SIEM products is used in analysis for identifying potential problems and reviewing all available data that are associated with the problems?

• A.Graphical user interface
• B.Incident tracking and reporting
• C.Security knowledge base
• D.Asset information storage and correlation