최신ISC Certified Secure Software Lifecycle Professional Practice Test - CSSLP무료샘플문제
문제1
You work as a Security Manager for Tech Perfect Inc. You want to save all the data from the SQL injection attack, which can read sensitive data from the database and modify database data using some commands, such as Insert, Update, and Delete. Which of the following tasks will you perform? Each correct answer represents a complete solution. Choose three.
You work as a Security Manager for Tech Perfect Inc. You want to save all the data from the SQL injection attack, which can read sensitive data from the database and modify database data using some commands, such as Insert, Update, and Delete. Which of the following tasks will you perform? Each correct answer represents a complete solution. Choose three.
정답: B,C,D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제2
The service-oriented modeling framework (SOMF) introduces five major life cycle modeling activities that drive a service evolution during design-time and run-time. Which of the following activities integrates SOA software assets and establishes SOA logical environment dependencies?
The service-oriented modeling framework (SOMF) introduces five major life cycle modeling activities that drive a service evolution during design-time and run-time. Which of the following activities integrates SOA software assets and establishes SOA logical environment dependencies?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제3
Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle?
Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제4
Which of the following is an example of over-the-air (OTA) provisioning in digital rights management?
Which of the following is an example of over-the-air (OTA) provisioning in digital rights management?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제5
Which of the following plans is a comprehensive statement of consistent actions to be taken before, during, and after a disruptive event that causes a significant loss of information systems resources?
Which of the following plans is a comprehensive statement of consistent actions to be taken before, during, and after a disruptive event that causes a significant loss of information systems resources?
정답: D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제6
Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.
Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.
정답: A,B,D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제7
Which of the following is a variant with regard to Configuration Management?
Which of the following is a variant with regard to Configuration Management?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제8
DRAG DROP
A number of security design patterns are developed for software assurance in general. Drag and drop the appropriate security design patterns in front of their respective descriptions.
DRAG DROP
A number of security design patterns are developed for software assurance in general. Drag and drop the appropriate security design patterns in front of their respective descriptions.
정답:
Explanation:
The various patterns applicable to software assurance in general are as follows: Hidden implementation: It limits the ability of an attacker to distinguish the internal workings of an application. Partitioned application: It splits a large and complex application into two or more simple components. Secure assertion: It distributes application-specific sanity checks throughout the system. Server sandbox: It creates a wall around the Web server to include the damage that occurs because of an undetected fault in the server or an exploited vulnerability.
문제9
Which of the following is designed to detect unwanted attempts at accessing, manipulating, and disabling of computer systems through the Internet?
Which of the following is designed to detect unwanted attempts at accessing, manipulating, and disabling of computer systems through the Internet?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제10
Which of the following are the primary functions of configuration management? Each correct answer represents a complete solution. Choose all that apply.
Which of the following are the primary functions of configuration management? Each correct answer represents a complete solution. Choose all that apply.
정답: A,B,D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제11
Which of the following security controls works as the totality of protection mechanisms within a computer system, including hardware, firmware, and software, the combination of which is responsible for enforcing a security policy?
Which of the following security controls works as the totality of protection mechanisms within a computer system, including hardware, firmware, and software, the combination of which is responsible for enforcing a security policy?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제12
Which of the following methods can be helpful to eliminate social engineering threat? Each correct answer represents a complete solution. Choose three.
Which of the following methods can be helpful to eliminate social engineering threat? Each correct answer represents a complete solution. Choose three.
정답: A,B,C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제13
In which of the following deployment models of cloud is the cloud infrastructure operated exclusively for an organization?
In which of the following deployment models of cloud is the cloud infrastructure operated exclusively for an organization?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)