【2026年最新】CISSP信息系统安全专家认证【中英对照版】_在线真题试卷与模拟练习_【2026年最新】CISSP信息系统安全专家认证【中英对照版】_考试宝

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

What is the MAIN purpose of a change management policy?

变更管理政策的主要目的是什么？

The application of which of the following standards would BEST reduce the potential for data breaches?

应用以下哪项标准最可能减少数据泄露的可能性？

What is considered a compensating control for NOT having electrical surge protectors installed?

未安装电涌保护器的补偿控制？

Which security access policy contains fixed security attributes that are used by the system to determine a user's access to a file or object?

哪个安全访问策略包含固定的安全属性，系统使用这些属性来确定用户对文件或对象的访问权限？

Which of the following is the BEST method to assess the effectiveness of an organization's vulnerability management program?

以下哪项是评估组织漏洞管理计划有效性的最佳方法？

What is maintained by using write blocking devices what forensic evidence is examined?

在检查取证证据时，使用写阻止设备维护什么？

Data leakage of sensitive information is MOST often concealed by which of the following?
敏感信息的数据泄露最常被以下哪一种隐瞒？

A Certified Information Systems Security Professional (CISSP) with identity and access management (IAM) responsibilities is asked by the Chief Information Security Officer (CISO) to4
Perform a vulnerability assessment on a web application to pass a Payment Card Industry (PCI)
Audit. The CISSP has never performed this before. According to the (ISC)2 Code of Professional
Ethics, which of the following should the CISSP do?
一位负责身份和访问管理（IAM）的认证信息系统安全专家（CISSP）被首席信息安全官（CISO）要求 4 对一个网络应用程序进行漏洞评估，以通过支付卡行业（PCI）审计。CISSP 以前从未执行过这个任务。根据（ISC)2 职业道德准则，CISSP 应该做以下哪一项？

Which of the following is the BEST approach to implement multiple servers on a virtual system?
以下哪项是在虚拟系统上实现多台服务器的最佳方法？

What Is the FIRST step for a digital investigator to perform when using best practices to collect
Digital evidence from a potential crime scene?
数字调查员在使用最佳实践从潜在的犯罪现场收集数字证据时，首先要执行的步骤是什么？

A security professional should consider the protection of which of the following elements FIRST when developing a defense-in-depth strategy for a mobile workforce?
在为移动工作人员制定纵深防御战略时，安全专业人员应首先考虑保护以下哪些要素？

Which of the following is security control volatility?
以下哪一个是安全控制的波动性？

The application of a security patch to a product previously validate at Common Criteria (CC) Evaluation Assurance Level (EAL) 4 would
将安全补丁应用于先前在通用标准（CC）评估保证级别（EAL） 4 中验证的产品将

Which of the following would present the higher annualized loss expectancy (ALE)?
以下哪项将呈现较高的年化预期亏损（ALE）？

Which of the following is the MOST secure password technique?

以下哪项是最安全的密码技术？

An analysis finds unusual activity coming from a computer that was thrown away several months prior, which of the following steps ensure the proper removal of the system?
分析发现来自几个月前被丢弃的计算机的异常活动，以下哪些步骤可确保正确删除系统？

A security professional has been asked to evaluate the options for the location of a new data center within a multifloored building. Concerns for the data center include emanations and physical access controls. Which of the following is the BEST location?
一名安全专业人员被要求评估在多层建筑内放置新数据中心的选项。数据中心关注的问题包括发射和物理访问控制。以下哪项是最佳位置？

A user is allowed to access the file labeled "Financial Forecast," but only between 9:00 a .m. and 5:00 p.m., Monday through Friday. Which type of access mechanism should be used to accomplish this?
允许用户访问文件标签“财务预测”，但只能在星期一至星期五的.m 9： 00 至.m 5：00 之间
访问。应使用哪种类型的访问机制来实现此目的？

A user sends an e-mail request asking for read-only access to files that are NOT considered sensitive. A Discretionary Access Control (DAC) methodology is in place. Which is the MOST suitable approach that the administrator should take?
用户发送电子邮件请求，要求对不被视为敏感的文件进行只读访问。自由访问控制（DAC）方法已经到位。管理者应该采取哪种最合适的方法？

Management has decided that a core application will be used on personal cellular phones. As an implementation requirement, regularly scheduled analysis of the security posture needs to be conducted. Management has also directed that continuous monitoring be implemented. Which of the following is required to accomplish management's directive?

管理层已决定在个人移动电话上使用核心应用程序。作为一项实施要求，需要定期对安全状况进行分析。管理层还指示进行持续监测。完成管理层的指示需要以下哪项？