首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
计算机
The following scenario applies to questions 29, 30, and 31. Barry has just been hired as the company security officer at an inte
The following scenario applies to questions 29, 30, and 31. Barry has just been hired as the company security officer at an inte
admin
2013-12-19
92
问题
The following scenario applies to questions 29, 30, and 31.
Barry has just been hired as the company security officer at an international financial institution. He has reviewed the company’s data protection policies and procedures. He sees that the company stores its sensitive data within a secured database. The database is located in a network segment all by itself, which is monitored by a network-based intrusion detection system. The database is hosted on a server kept within a server room, which can only be accessed by personnel with the correct PIN value and smart card. Barry finds that the sensitive data backups are not being properly secured and requests that the company implement a secure courier service that moves backup tapes to a secured location. His management states that this option is too expensive, so Barry implements a local hierarchy storage management system that properly protects the sensitive data.
Which are the two most common situations that require the type of control covered in the scenario to be implemented?
选项
A、Defense-in-depth is required, and the current controls only provide one protection layer.
B、Primary control costs too much or negatively affects business operations.
C、Confidentiality is the highest concern in a situation where defense-in-depth is required.
D、Availability is the highest concern in a situation where defense-in-depth is required.
答案
B
解析
B正确。之所以实施补偿控制,是因为提议的主要控制太昂贵了但仍然是必需的。所以需要确定和实施能提供相同类型的保护但较为便宜一点的控制。需要补偿控制的另一种情况就是主要控制会负面影响业务运营。
A不正确。因为尽管补偿控制可以提供深度防御,但它并不是这种类型的控制加以实施的原因。
C不正确。因为补偿控制可能会也可能不会提供保密性。但是控制提供的保密性方面的服务并不是实施补偿控制的原因。补偿控制是一种替换控制类型。
D不正确。因为补偿控制可能会也可能不会提供可用性。但是控制提供的可用性方面的服务并不是实施补偿控制的原因。补偿控制是一种替换控制类型。
转载请注明原文地址:https://kaotiyun.com/show/LNhZ777K
0
CISSP认证
相关试题推荐
AsformercolonistsofGreatBritain,theFoundingFathersoftheUnitedStatesadoptedmuchofthelegalsystemofGreatBritai
AsformercolonistsofGreatBritain,theFoundingFathersoftheUnitedStatesadoptedmuchofthelegalsystemofGreatBritai
Thecountry’sinadequatementalhealthsystemgetsthemostattentionafterinstancesofmassviolencethatthenationhasseen
In2009theEuropeanCommissioncarriedoutaninvestigationintoMicrosoft.TheAmericansoftwaregianttiedInternetExplorer,
[A]Whattodoasastudent?[B]Variousdefinitionsofplagiarism[C]Ideasshouldalwaysbesourced[D]Ignorancecanbeforgi
Writealettertoacompanydecliningajoboffer.Inyourletter,youshouldappreciatethejoboffer,andstateyourreason(s)
DespiteincreasedairportsecuritysinceSeptember11th,2001,thetechnologytoscanbothpassengersandbaggageforweaponsan
Themethodsoftestingaperson’sknowledgeandabilityremainasprimitiveasevertheywere.Afteralltheseyears,education
Themethodsoftestingaperson’sknowledgeandabilityremainasprimitiveasevertheywere.Afteralltheseyears,education
Twentyyearsagoadebateeruptedaboutwhethertherewerespecific"Asianvalues".Butamoreintriguing,iflessnoticed,arg
随机试题
提高换热器的传热系数,能够有效地提高传热速率。
A.下肢放射性疼痛B.小腿外侧感觉障碍,拇趾背伸力弱C.两者均有D.两者均无L3~L4椎间盘突出症的临床表现可有
患者,男,34岁。原有风湿性心脏病10年,经常因心衰住院。平时服用地高辛0.125mg每天2次和利尿药,最近觉低热、胃纳减退,浑身酸痛伴气急加重就诊,体检:半卧位,颈静脉充盈,心界扩大,心率120次/分,房颤。心尖部双期杂音。两肺底少量细湿啰音,肝大肋下两
患者粟某,发热倦怠,胸闷腹胀。艘酸咽痛,颐肿口渴,身目发黄,尿赤淋浊,苔黄脉数。治宜选用()
关于五脏所藏的叙述,错误的是()
绿色建筑的含义是()。
买断式回购采用()的方式。
商业银行员工在工作中,由于知识/技能匮乏所造成的操作风险主要有()。
认为知识并不是对现实的准确表征,它只是一种解释、一种假设的理论属于()
通过指定字段的数据类型和宽度来限制该字段的取值范围,这属于完整性中的()。
最新回复
(
0
)