GIAC Certified ISO-2700 Specialist Practice Test 認定 G2700 試験問題:

1. Which of the following indicates that the project team has decided not to change the project management plan to deal with a risk?

A) Risk transference
B) Risk avoidance
C) Risk acceptance
D) Risk mitigation

2. Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.

A) These can be removed completely by taking proper actions.
B) These can be mitigated by reviewing and taking responsible actions based on possible risks.
C) These are considered as an indicator of threats coupled with vulnerability.
D) These can be analyzed and measured by the risk analysis process.

3. You work as a Network Security Administrator for uCertify Inc. Your organization has set up a new Internet connection in place of the previous one. It is your responsibility to ensure that employees use the Internet only for official purposes. While reviewing Internet usages, you find that a few people have traversed and downloaded some inappropriate and illegal information. You want to make a policy to stop all these activities in the future. Which of the following policies will you implement to accomplish the task?

A) Security policy
B) Acceptable use policy
C) Due care policy
D) Privacy policy

4. Which of the following attacks can be mitigated by providing proper training to the employees in an organization?

A) Social engineering
B) Man-in-the-middle
C) Denial-of-Service
D) Smurf

5. Andrew is the CEO of uCertify Inc. He wants to improve the resources and revenue of the company. He uses the PDCA methodology to accomplish the task. Which of the following are the phases of the PDCA methodology?
Each correct answer represents a complete solution. Choose all that apply.

A) Plan
B) Calculate
C) Act
D) Deviate

質問と回答：