Hamster
Search
Open menu
CM243_v2
考前須知
CISA及CISSP：成為訊息安全審查員或訊息安全專員課程自我檢查
1. Which of the following would be an indicator of the effectiveness of a computer security incident response team?
A.
Number of successful penetration tests.
B.
Number of security vulnerabilities that were patched.
C.
Financial impact per security incident.
D.
Percentage of business applications that are being protected.
2. A program that does not reproduce itself but pretends to be performing a legitimate action, which acting performing malicious operations in the background is the characteristic of which of the following?
A.
Trapdoor.
B.
Worms.
C.
Virus.
D.
Trojan.
3. Which of the following protocol is usually used in a site-to-site VPN?
A.
IPSec
B.
DES
C.
RSA
D.
PPP
4. The role of the certificate authority (CA) as a third party is to:
A.
Host a repository of certificates with the corresponding public and secret keys issued by that CA.
B.
Act as a trusted intermediary between two communication partners.
C.
Confirm the identity of the entity owning a certificate issued by that CA.
D.
Provide secured communication and networking services based on certificates.
5. It is estimated that for the moment the computers in your company will be infected by viruses about 3 times annually. Each time it will cost $4000. Which of the following solution would you consider for better security?
A.
Set up a thin client environment at the cost of $13000 annually.
B.
Install anti-virus software at the cost of $10000 annually.
C.
Migrate to Linux at the cost of $13000 annually.
D.
Install a firewall at the cost of $20000 annually.
6. When using a universal storage bus (USB) flash drive to transport confidential corporate data to an offsite location, an effective control would be to:
A.
Carry the flash drive in a portable safe.
B.
Request that management deliver the flash drive by courier.
C.
Encrypt the folder containing the data with a strong key.
D.
Assure management that you will not lose the flash drive.
7. The goals of integrity do NOT include:
A.
Preservation of internal and external consistency.
B.
Prevention of unauthorized or unintentional modification of information by users.
C.
Prevention of the modification of information by unauthorized users.
D.
Accountability of responsible individuals.
8. What are the characteristics of the encryption used in PKI? (Choose two)
A.
Symmetric
B.
Reversible
C.
Asymmetric
D.
Non-reversible
9. Which of the following is a problem with symmetric key encryption?
A.
Work factor is not a function of the key size
B.
Is slower than asymmetric key encryption
C.
Most algorithms are kept proprietary
D.
Secure distribution of the secret key
10. Which of the followings can be accomplished by applying a Digital Signature to an email?
A.
The contents of the email cannot be read by others except the receiver.
B.
The receiver will notice if the contents of the email is altered during the transmission.
C.
The identity of the sender can be assured.
D.
The identity of the receiver can be assured.
11. Which of the following would MOST effectively enhance the security of a challenge-response based authentication system?
A.
Selecting a more robust algorithm to generate challenge strings.
B.
Implementing measures to prevent session hijacking attacks.
C.
Increasing the frequency of associated password changes.
D.
Increasing the length of authentication strings.
12. In order to ensure constant redundancy and fault-tolerance, which of the following type of spare is recommended?
A.
Archives.
B.
Hot spare.
C.
Cold spare.
D.
Warm spare.
13. Personal identity verification systems which use hand or fingerprint, handwriting, eye pattern, voice, face, or any other physical characteristics for authentication are:
A.
Technological systems.
B.
Physiometric devices.
C.
Physical analysis devices.
D.
Biometric devices.
14. While downloading software, a hash may be provided to:
A.
Serve as a license key for paid users of the software.
B.
Ensure that the software comes from a genuine source.
C.
Ensure that the software has not been modified.
D.
Ensure that the software is the correct revision number.
15. The primary function of a physical protection system is?
A.
Detection, delay and response.
B.
Determine, direct and dispatch.
C.
Display, develop, initiate and apprehend.
D.
Evaluate, dispatch and detain.