Fred is a new security officer who wants to implement a control for detecting and preventing users who attempt to exceed their a

admin2013-12-19 43

问题 Fred is a new security officer who wants to implement a control for detecting and preventing users who attempt to exceed their authority by misusing the access rights that have been assigned to them. Which of the following best fits this need?

选项 A、Management review
B、Two-factor identification and authentication
C、Capturing this data in audit logs
D、Implementation of a strong security policy

答案A

解析 A正确。这个问题的目标是想让你意识到管理层和主管的参与对确保这种事情不发生，或者被恰当检测到，或者在发生时正确应对是至关重要的。如果用户知道若他们胡作非为，管理层会采取行动，那么就能起到预防作用。这些行为只有在它们发生之后才能被了解，这意味着在通知管理层之前，安全办公室必须实施一些检测活动。
B不正确。因为身份识别和身份验证具有预防性，而非检测性。
C不正确。因为审计日志具有检测性而非预防性。然而，为了具有检测性，安全管理员必须审核审计日志。虽然某些最有力的安全保护来自于预防性控制，但是像审核审计日志这样的检测性控制也是需要的。
D不正确。因为安全策略具有预防性，而非检测性。安全策略的开发和实施是为了让用户知道他们应该怎么做，以及如果他们不遵循这个策略的构建会有什么样的潜在后果。

转载请注明原文地址:https://kaotiyun.com/show/dAhZ777K

CISSP认证

相关试题推荐

随机试题

最新回复(0)

Fred is a new security officer who wants to implement a control for detecting and preventing users who attempt to exceed their a

CISSP认证

TheTreasurycouldpocket20millionayearinextrafinesoncethecountry’sspeedcameranetworkisexpanded.Motoringorgani

Individualsandbusinesseshavelegalprotectionforintellectualpropertytheycreateandown.Intellectualproper【C1】______fro

Publicrelationsisabroadsetofplannedcommunicationsaboutthecompany,includingpublicityreleases,designedtopromoteg

Severaltypesoffinancialriskareencounteredininternationalmarketing;themajorproblemsincludecommercial,political,an

School-agechildrenshouldparticipatein60minutesormoreofmoderatetovigorousphysicalactivitydaily,accordingtoanex

Writeanessayof160-200wordsbasedonthefollowingdrawing.Inyouressay,youshould1)describethedrawingbriefly,

Writeanessayof160~200wordsbasedonthefollowingdrawing.Inyouressay,youshould1)describethedrawingbriefly,

Clothesplayacriticalpartintheconclusionswereachbyprovidingcluestowhopeopleare,whotheyarenot,andwhotheywo

Clothesplayacriticalpartintheconclusionswereachbyprovidingcluestowhopeopleare,whotheyarenot,andwhotheywo

Therobotsarecoming.Theseconddecadesofthe21thcenturywillseetheriseofmerchandizedarmythatwillrevolutionizethe

设函数g(x)=1+x，且当x≠0时，f[g(x)]=

以下关于破伤风患者的叙述哪项是错误的

市场条件是指行权价格、可行权条件以及行权可能性与权益工具的市场价格相关的业绩条件。()

Theideathatpeoplemightbechosenorrejectedforjobsonthebasisoftheirgenesdisturbsmany.Such【C1】______may,however,

IwantedtobuyacolorTVsetthisyear,butmybrotherrejectedtheidea______atriptothebeach.

A、10.B、9.C、12D、8A题目询问男士多大时开始对集邮感兴趣。对话刚开始便一问一答给出此题的答案，第二句“…whenIwasabouttenyearsold”即得出答案为选项A(10)。

Theyear2005isthemidpointofadecadethatspansthreeunique,importanttransitioninthehistoryofhumankind.