首页  /     /   在线练习

更新时间：   试题数量：   购买人数：   提供作者：

有效期： 个月

章节介绍： 共有个章节

收藏
搜索
题库预览
What scenario describes data at rest?
什么场景描述静态数据？
If you are selecting a security standard for a Windows 10 system that processes credit cards, what security standard is your best choice?

如果您正在为处理信用卡的Windows 10系统选择安全标准，您的最佳选择是什么安全标准？

The Center for Internet Security （CIS） works with subject matter experts from a variety of industries to create lists of security controls for operating systems, mobile devices, server software, and network devices. Your organization has decided to use the CIS benchmarks for your systems. 

互联网安全中心（CIS）与来自不同行业的主题专家合作，为操作系统、移动设备、服务器软件和网络设备创建安全控制列表。您的组织已决定为您的系统使用CIS基准。

The Center for Internet Security （CIS） works with subject matter experts from a variety of industries to create lists of security controls for operating systems, mobile devices, server software, and network devices. Your organization has decided to use the CIS benchmarks for your systems. Answer the following questions based on this decision.

互联网安全中心（CIS）与来自不同行业的主题专家合作，为操作系统、移动设备、服务器软件和网络设备创建安全控制列表。您的组织已决定为您的系统使用CIS基准。根据此决定回答以下问题。

The CIS benchmarks are an example of what practice?

CIS基准是什么实践的一个例子？

The Center for Internet Security （CIS） works with subject matter experts from a variety of industries to create lists of security controls for operating systems, mobile devices, server software, and network devices. Your organization has decided to use the CIS benchmarks for your systems. 

互联网安全中心（CIS）与来自不同行业的主题专家合作，为操作系统、移动设备、服务器软件和网络设备创建安全控制列表。您的组织已决定为您的系统使用CIS基准。

Adjusting the CIS benchmarks to your organization’s mission and your specific IT systems would involve what two processes?

根据组织的任务和特定IT系统调整CIS基准将涉及哪两个过程？

The Center for Internet Security （CIS） works with subject matter experts from a variety of industries to create lists of security controls for operating systems, mobile devices, server software, and network devices. Your organization has decided to use the CIS benchmarks for your systems. 

互联网安全中心（CIS）与来自不同行业的主题专家合作，为操作系统、移动设备、服务器软件和网络设备创建安全控制列表。您的组织已决定为您的系统使用CIS基准。

How should you determine which controls from the baseline should be applied to a given system or software package?

您应该如何确定基线中的哪些控件应应用于给定的系统或软件包？

The company that Henry works for operates in the EU and collects data about their cus-tomers. They send that data to a third party to analyze and provide reports to help the company make better business decisions. What term best describes the third-party anal-ysis company?
亨利工作的那家公司在欧盟运营，收集客户的数据。他们将数据发送给第三方进行分析并提供报告，以帮助公司做出更好的业务决策。什么术语最能描述第三方分析公司？
The government defense contractor that Selah works for has recently shut down a major research project and is planning on reusing the hundreds of thousands of dollars of systems and data storage tapes used for the project for other purposes. When Selah reviews the com-pany’s internal processes, she finds that she can’t reuse the tapes and that the manual says they should be destroyeD.Why isn’t Selah allowed to degauss and then reuse the tapes to save her employer money?
塞拉工作的政府国防承包商最近关闭了一个重大研究项目，并计划将用于该项目的数十万美元的系统和数据存储磁带用于其他用途。当Selah回顾公司的内部流程时，她发现她不能重复使用磁带，手册上说应该销毁磁带。为什么不允许Selah消磁，然后再重复使用磁带以节省雇主的钱？
Information maintained about an individual that can be used to distinguish or trace their identity is known as what type of information?
关于个人的信息，可以用来区分或追踪他们的身份，被称为什么类型的信息？
Which of the following information security risks to data at rest would result in the greatest reputational impact on an organization?
以下哪项对静止数据的信息安全风险会对组织的声誉造成最大影响？
Full disk encryption like Microsoft’s BitLocker is used to protect data in what state?
像Microsoft的BitLocker这样的全磁盘加密用于在什么状态下保护数据？
The company that Katie works for provides its staff with mobile phones for employee use, with new phones issued every two years. What scenario best describes this type of practice when the phones themselves are still usable and receiving operating system updates?
凯蒂工作的公司为员工提供手机供员工使用，每两年发行一次新手机。当手机本身仍然可用并接收操作系统更新时，哪种场景最能描述这种做法？
What is the primary purpose of data classification? 数据分类的主要目的是什么？
Fred’s organization allows downgrading of systems for reuse after projects have been finished and the systems have been purgeD.What concern should Fred raise about the reuse of the systems from his Top Secret classified project for a future project classified as Secret?
Fred的组织允许在项目完成并清除系统后降级系统以供重用。Fred应该对其绝密机密项目中的系统在未来机密项目中的重用提出什么担忧？
Which of the following concerns should not be part of the decision when classifying data?
在对数据进行分类时，下列哪些问题不应作为决策的一部分？
Which of the following is the least effective method of removing data from media?
以下哪一项是从介质中删除数据最不有效的方法？
The healthcare company that Amanda works for handles HIPAA data as well as internal business data, protected health information, and day-to-day business communications. Its internal policy uses the following requirements for securing HIPAA data at rest and in transit.
Amanda工作的医疗保健公司处理HIPAA数据以及内部业务数据、受保护的健康信息和日常业务通信。其内部政策使用以下要求来保护静止和传输中的HIPAA数据。
（含图）
What encryption technology would be appropriate for HIPAA documents in transit?
什么加密技术适用于运输中的HIPAA文件？
The healthcare company that Amanda works for handles HIPAA data as well as internal business data, protected health information, and day-to-day business communications. Its internal policy uses the following requirements for securing HIPAA data at rest and in transit.
Amanda工作的医疗保健公司处理HIPAA数据以及内部业务数据、受保护的健康信息和日常业务通信。其内部政策使用以下要求来保护静止和传输中的HIPAA数据。
（含图）
Amanda’s employer asks Amanda to classify patient X-ray data that has an internal patient identifier associated with it but does not have any way to directly identify a patient. The company’s data owner believes that exposure of the data could cause damage （but not excep-tional damage） to the organization. How should Amanda classify the data?
Amanda的雇主要求Amanda对患者X射线数据进行分类，这些数据具有与之相关的内部患者标识符，但无法直接识别患者。该公司的数据所有者认为，数据泄露可能会对组织造成损害（但不是例外损害）。Amanda应该如何对数据进行分类？
The healthcare company that Amanda works for handles HIPAA data as well as internal business data, protected health information, and day-to-day business communications. Its internal policy uses the following requirements for securing HIPAA data at rest and in transit.
Amanda工作的医疗保健公司处理HIPAA数据以及内部业务数据、受保护的健康信息和日常业务通信。其内部政策使用以下要求来保护静止和传输中的HIPAA数据。
（含图）
What technology could Amanda’s employer implement to help prevent confidential data from being emailed out of the organization?
Amanda的雇主可以实施什么技术来帮助防止机密数据通过电子邮件发送出去？
Jacob’s organization uses the US government’s data classification system, which includes Top Secret, Secret, Confidential, and Unclassified ratings （from most sensitive to least）. Jacob encounters a system that contains Secret, Confidential, and Top Secret data. How should it be classified?
雅各布的组织使用美国政府的数据分类系统，包括绝密、机密、机密和非机密评级（从最敏感到最不敏感）。Jacob遇到了一个包含机密、机密和绝密数据的系统。它应该如何分类？
Elle is planning her organization’s asset retention efforts and wants to establish when the company will remove assets from use. Which of the following is typically the last event in a manufacturer or software provider’s lifecycle?
Elle正在计划其组织的资产保留工作，并希望确定公司何时停止使用资产。以下哪项通常是制造商或软件提供商生命周期中的最后一个事件？
1 5 6 7 8 9 65
更多题库
电机检修初级工
沟通复习题题库3
沟通课复习题库2
沟通课复习题库1
党史应知应会
内燃机车副司机
中专内科十一月份
配电线路试卷B+C
CD大大方方
2000-判断
入学教育单选
“学史忆征程 永远跟党走”党史知识竞赛题库
判断网店运营
另一个二号线题
岗位胜任能力
新阿里云人工智能ACP