首页
外语
计算机
考研
公务员
职业资格
财经
工程
司法
医学
专升本
自考
实用职业技能
登录
计算机
The following scenario applies to questions 27 and 28. Sam is the security manager of a company that makes most of its revenue f
The following scenario applies to questions 27 and 28. Sam is the security manager of a company that makes most of its revenue f
admin
2013-12-19
78
问题
The following scenario applies to questions 27 and 28.
Sam is the security manager of a company that makes most of its revenue from its intellectual property. Sam has implemented a process improvement program that has been certified by an outside entity. His company received a Level 2 during an appraisal process, and he is putting in steps to increase this to a Level 3. A year ago when Sam carried out a risk analysis, he determined that the company was at too much of a risk when it came to potentially losing trade secrets. The countermeasure his team implemented reduced this risk, and Sam determined that the annualized loss expectancy of the risk of a trade secret being stolen once in a hundred-year period is now $400.
Which of the following is the criteria Sam’s company was most likely certified under?
选项
A、SABSA
B、Capability Maturity Model Integration
C、Information Technology Infrastructure Library
D、Prince2
答案
C
解析
B正确。软件能力成熟度模型集成(CMMI)是一种帮助组织提高性能的过程改进方法。CMMI模型也可以用作评估组织的过程成熟度框架。CMMI中使用的等级有等级1-初始级,等级2-已管理级,等级3-已定义级,等级4-量化管理级以及等级5-优化管理级。
A不正确。因为Sherwood应用的商业安全体系结构(SABSA)是信息安全企业体系结构的开发模型和方法。由于它是一个框架,这意味着它提供的是供独立体系结构构建的结构。也正是因为它是一种方法,所以意味着它提供了构建和维护这种体系结构所需要遵循的流程。
C不正确。因为信息技术基础构架库(ITIL)是IT服务管理最佳行为的实际标准。之所以创建ITIL是因为业务需求对信息技术的依赖性逐渐增加。尽管ITIL包含了一个处理安全的组件,但它的重心更多地集中在IT部门和它所服务的“客户”之间的内部服务级别协议。这些客户通常是内部部门。ITIL并不适用该情景中描述的等级。
D不正确。因为PRINCE2(受控环境中的项目)是为了实现高效项目管理的一种基于过程的方法。它主要是UK政府使用,而不是CISSP考试所涉及的主题。
转载请注明原文地址:https://kaotiyun.com/show/TNhZ777K
0
CISSP认证
相关试题推荐
Salt,shellsormetalsarestillusedasmoneyinout-the-waypartsoftheworldtoday.Saltmayseemratherastrange【C1】__
AsformercolonistsofGreatBritain,theFoundingFathersoftheUnitedStatesadoptedmuchofthelegalsystemofGreatBritai
Thetranslatormusthaveanexcellent,up-to-dateknowledgeofhis【C1】______languages,fullfacilityinthehandlingofhistarg
[A]Butworkisunderwaytogetcomputerstocapturehumanlifeandrememberitaspeopledo—recallingbitsofexperiencethata
YouwanttocontributetoProjectHopebyofferingfinancialaidtoachildinaremotearea.Writealettertothedepartmentc
Themethodsoftestingaperson’sknowledgeandabilityremainasprimitiveasevertheywere.Afteralltheseyears,education
Howmenfirstlearnedtoinventwordsisunknown;inotherwords,theoriginoflanguageisamystery.Allwereallyknowistha
Overthepastdecade,manycompanieshadperfectedtheartofcreatingautomaticbehaviors—habits—amongconsumers.Thesehabits
Familiarasitmayseem,gravityremainsamysterytomodernphysics.Despiteseveraldecadesoftrying,scientistshavefailed
Whattypeofriskanalysisapproachdoesthefollowinggraphicprovide?
随机试题
简析《回答》的主题意蕴。
A.血钙增高、血磷降低B.血磷增高C.血钙和血磷同时增高D.血钙和血磷同时降低E.血钙降低、血磷增高甲状旁腺功能低下可见
23岁初产妇,身高160cm,孕40周,规律宫缩12h,阴道检查:宫口开大5cm,先露0,大囟在3点,小囟在9点,矢状缝向后靠近骶岬,盆腔后部空虚,其诊断为
青少年牙周炎的特点为
长期慢性便秘者,不宜长期大量使用()。
城市用地大类中的绿地是指居住小区及居住小区以上级的公共绿地和生产防护绿地。()[2004年考题]
根据《绿色施工导则》规定,施工现场_______公里以内生产的建筑材料用量应占建筑材料总重量的_______以上。()
《统计法》规定,国家有计划地加强统计信息化建设,推进()。
教师知识大体上包括四个方面的内容,其中与教师经验积累程度和教师知识面宽窄有关的是()。
小李是东方公司的会计,利用自己所学的办公软件进行记账管理,为节省时间,同时又确保记账的准确性,她使用Excel编制了2014年3月员工工资表Excel.xlsx。请你根据下列要求帮助小李对该工资表进行整理和分析(提示:本题中若出现排序问题则采用升
最新回复
(
0
)