首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
计算机
The following scenario applies to questions 29, 30, and 31. Barry has just been hired as the company security officer at an inte
The following scenario applies to questions 29, 30, and 31. Barry has just been hired as the company security officer at an inte
admin
2013-12-19
119
问题
The following scenario applies to questions 29, 30, and 31.
Barry has just been hired as the company security officer at an international financial institution. He has reviewed the company’s data protection policies and procedures. He sees that the company stores its sensitive data within a secured database. The database is located in a network segment all by itself, which is monitored by a network-based intrusion detection system. The database is hosted on a server kept within a server room, which can only be accessed by personnel with the correct PIN value and smart card. Barry finds that the sensitive data backups are not being properly secured and requests that the company implement a secure courier service that moves backup tapes to a secured location. His management states that this option is too expensive, so Barry implements a local hierarchy storage management system that properly protects the sensitive data.
Which are the two most common situations that require the type of control covered in the scenario to be implemented?
选项
A、Defense-in-depth is required, and the current controls only provide one protection layer.
B、Primary control costs too much or negatively affects business operations.
C、Confidentiality is the highest concern in a situation where defense-in-depth is required.
D、Availability is the highest concern in a situation where defense-in-depth is required.
答案
B
解析
B正确。之所以实施补偿控制,是因为提议的主要控制太昂贵了但仍然是必需的。所以需要确定和实施能提供相同类型的保护但较为便宜一点的控制。需要补偿控制的另一种情况就是主要控制会负面影响业务运营。
A不正确。因为尽管补偿控制可以提供深度防御,但它并不是这种类型的控制加以实施的原因。
C不正确。因为补偿控制可能会也可能不会提供保密性。但是控制提供的保密性方面的服务并不是实施补偿控制的原因。补偿控制是一种替换控制类型。
D不正确。因为补偿控制可能会也可能不会提供可用性。但是控制提供的可用性方面的服务并不是实施补偿控制的原因。补偿控制是一种替换控制类型。
转载请注明原文地址:https://kaotiyun.com/show/LNhZ777K
0
CISSP认证
相关试题推荐
Themassmediaisabigpartofourculture,yetitcanalsobeahelper,adviserandteachertoouryounggeneration.Themass
Individualsandbusinesseshavelegalprotectionforintellectualpropertytheycreateandown.Intellectualproper【C1】______fro
Thetranslatormusthaveanexcellent,up-to-dateknowledgeofhis【C1】______languages,fullfacilityinthehandlingofhistarg
TheAffordableCareAct,betterknownasObamacare,wassupposedtotransformAmericanhealthinsurance.Criticshavelongfeare
BendItLikeBeckhamiswelcome.ItisthestoryofaBritishgirlnamedJesswhomustchoosebetweenthetraditionsofherfami
DespiteincreasedairportsecuritysinceSeptember11th,2001,thetechnologytoscanbothpassengersandbaggageforweaponsan
Howmenfirstlearnedtoinventwordsisunknown;inotherwords,theoriginoflanguageisamystery.Allwereallyknowistha
"Thisisareallyexcitingtime—aneweraisstarting,"saysPeterBazalgette,thechiefcreativeofficerofEndemol,thetelev
Notlongago,chiefexecutiveofficers(CEOS)werelandedasheroes,leadersofthebraveneweconomy.BillGatesandJackWelchw
随机试题
阅读《短歌行》中的一段,然后回答问题。月明星稀,乌鹊南飞。绕树三匝,何枝可依?山不厌高,水不厌深。周公吐哺,天下归心。由此可见,全诗表达了曹操怎样的思想感情?
1.题目名称:电机扩大机试验与补偿度调整。2.题目内容:(1)电刷中性线位置调整。(2)空载特性试验,绘制空载特性曲线。(3)外特性试验与补偿度调整,绘制外特性曲线。3.时限:240min。4.
最常见的眼睑恶性肿瘤是
患者,女性,39岁。因易乏力、间歇头晕2个月就诊,伴肢端麻木,无多尿、口渴。查体:身高165cm,体重75kg,BP140/92mmHg,心肺无异常,双膝反射减弱。半个月后患者来复诊,并诉说曾到附近诊所诊治,给加用每日1片(2.5mg)格列本脲。服药后
流行病学工作的3个阶段是
A.胃小弯B.胃窦部C.胃大弯D.十二指肠球部E.十二指肠球后部
以下分泌组织均为油细胞的药材是
行政复议参加入包括()。
关于施工现场电工作业的说法,正确的有()。
行政组织具有鲜明的政治性,是为统治阶级的利益服务的。()
最新回复
(
0
)