156-110最も有効な質問と解答で勉強

Which of the following statements about encryption's benefits is false? Encryption can:
(Choose TWO.)

• A. only be used to protect data in transit. Encryption provides no protection to stored data.
• B. significantly reduce the chance information will be modified by unauthorized entities.
• C. prevent information from being destroyed by malicious entities, while in transit.
• D. significantly reduce the chance information will be viewed by unauthorized entities.
• E. allow private information to be sent over public networks, in relative safety.

ABC Corporation's network is configured such that a user must log in individually at each server and access control. Which type of authentication is in use?

• A. Role-based access control
• B. Mandatory sign-on
• C. Three-factor authentication
• D. Single sign-on
• E. Hybrid access control

You are considering purchasing a VPN solution to protect your organization's information assets. The solution you are reviewing uses RFC-compliant and open-standards encryption schemes. The vendor has submitted the system to a variety of recognized testing authorities. The vendor does not make the source code available to testing authorities.
Does this solution adhere to the secure design principle of open design?

• A. No, because the software vendor could have changed the code after testing, which is not verifiable.
• B. No, because the software vendor submitted the software to testing authorities only, and did not make the software available to the public for testing.
• C. No, because if a software vendor refuses to reveal the source code for a product, it cannot comply with the open-design principle.
• D. Yes, because the methods are open, and the system does not rely on the secrecy of its internal mechanisms to provide protection.
• E. Yes, because the methods were tested by recognized testing authorities, and the source code is protected from vandalism.

Why should user populations be segmented?

• A. To prevent the generation of audit trails from gateway devices
• B. To prevent appropriate collaboration
• C. To allow appropriate collaboration, and prevent inappropriate resource sharing
• D. To allow resources to be shared among employees
• E. To provide authentication services

Which of the following is NOT a Business Continuity Plan (BCP) recovery strategy?

• A. Manual procedures; alternative solution to technology available
• B. Doing nothing; no action taken to recover the technology
• C. Deferring action; action waiting until a later date
• D. Reciprocal agreements with another organization
• E. Delegating risk to another entity, such as an insurer