先試後買

A. Data decrease related to storing personal information

B. Reduction in operational costs to the agency

C. Attribute assertions as agencies can request a larger set of attributes to fulfill service delivery

D. Enable business objectives so departments can focus on mission rather than the business of identity management

A. Working software over comprehensive documentation

B. Following a plan over responding to change

C. Contract negotiation over customer collaboration

D. Processes and toots over individuals and interactions

A. A vulnerability found only in legacy systems

B. A vulnerability that is exploited before the vendor is aware of it or has released a patch

C. A vulnerability that requires physical access to exploit

D. A vulnerability that has been publicly disclosed and patched

A. Since they are CISSP certified, they have enough knowledge to assist with the request, but will need assistance in order to complete it in a timely manner

B. Review the CISSP guidelines for performing a vulnerability assessment before proceeding to complete it

C. Review the PCI requirements before performing the vulnerability assessment

D. Inform the CISO that they are unable to perform the task because they should render only those services for which they are fully competent and qualified

A. Use least privilege at each level to restrict access.

B. Allow a user group to restrict access.

C. Use a third-party tool to restrict access.

D. Restrict access to all users.

A. The risk transferred to an insurance provider

B. The risk that remains after security controls have been implemented to mitigate the original risk

C. The total risk present before any controls are applied

D. The risk associated exclusively with insider threats

A. Layering multiple, complementary security controls so that if one fails, others still provide protection

B. Focusing security investment solely on perimeter defenses

C. Outsourcing all security functions to a third party

D. Relying on a single, highly effective security control

A. To validate data ownership

B. To save cost for storage and backup

C. To comply with legal and business requirements

D. To meet destruction guidelines

A. A network-based firewall is stateful, while a host-based firewall is stateless.

B. A network-based firewall blocks network intrusions, while a host-based firewall blocks malware.

C. A network-based firewall controls traffic passing through the device, while a host-based firewall controls traffic destined for the device.

D. A network-based firewall verifies network traffic, while a host-based firewall verifies processes and applications.

A. Maintain a list of efficient network paths between autonomous systems.

B. Maintain a list of network paths between internet routers.

C. Provide Routing Information Protocol (RIP) version 2 advertisements to neighboring layer 3 devices.

D. Provide firewall services to cloud-enabled applications.

A. A program used exclusively by government agencies

B. To incentivize external security researchers to responsibly discover and report vulnerabilities in an organization's systems in exchange for monetary rewards or recognition, supplementing internal testing efforts

C. To provide a channel for customers to report unrelated product complaints

D. To replace the need for internal security testing entirely