CheckPoint Check Point Certified Security Principles Associate (CCSPA) 認定 156-110 試験問題:

1. Maintenance of the Business Continuity Plan (BCP) must be integrated with an organization's _______________ process.

A) Compensation-review
B) Change-control
C) Discretionary-budget
D) Disaster-recovery
E) Inventory-maintenance

2. Distinguish between the role of the data owner and the role of the data custodian.
Complete the following sentence. The data owner is the:

A) person or entity who accesses/and or manipulates data or information, in the course of assigned duties. The data custodian is a person or process with the appropriate level of privilege to access the data.
B) person or entity ultimately responsible for the security of an information asset. The data custodian is the person or entity responsible for imposing and enforcing policies and restrictions, dictated by the data owner.
C) person or process that originally creates the information. The data custodian is a role that shifts to any person or process currently accessing the data, and passes to the next person or process to access the data.
D) department in the organization responsible for the data's physical storage location. The data custodian is anyone who has access the data for any reason.
E) person or entity responsible for imposing and enforcing policies and restrictions, dictated by the functional user. The data custodian is a person or process who accesses and/or manipulates the information.

3. Which of the following represents a valid reason for testing a patch on a nonproduction system, before applying it to a production system?

A) Patches may re-enable services previously disabled.
B) Patches usually break important system functionality.
C) Only patches on vendor-pressed CDs can be trusted.
D) Patches are a kind of virus.
E) Patches always overwrite user data.

4. Which of these choices correctly describe denial-of-service (DoS) attacks? (Choose
THREE.)

A) DoS attacks free the target system of excessive overhead.
B) DoS attacks cause the attacked system to accept legitimate access requests.
C) DoS ties up a system with so many requests, system resources are consumed, and performance degrades.
D) DoS attacks do not require attackers to have any privileges on a target system.
E) DoS attacks are nearly impossible to stop, once they begin.

5. Which of the following is likely in a small-business environment?

A) Security budgets are very small.
B) Most employees have experience with information security.
C) Resources are available as needed.
D) Most small businesses employ a full-time information-technology staff.
E) Small businesses have security personnel on staff.

質問と回答：