IIBA-CCA問題集、IIBA実際の試験問題

質問 1

When attackers exploit human emotions and connection to gain access, what technique are they using?

A. Tailgating

B. Phishing

C. Social Engineering

D. Malware

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

What is the "impact" in the context of cybersecurity risk?

A. The potential for violation of privacy laws and regulations from a cybersecurity breach

B. The magnitude of harm that can be expected from unauthorized information use

C. The probability that a breach will occur within a given period of time

D. The financial costs to the organization resulting from a breach

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which capability would a solution option need to demonstrate in order to satisfy Logging Requirements?

A. Offers both on-premise and as-a-service delivery options

B. Facilitates Single Sign-On

C. Integrates with Risk Logging software

D. Records information about user access and actions in the system

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Cybersecurity regulations typically require that enterprises demonstrate that they can protect:

A. trade secrets and other intellectual property.

B. applications and technology systems.

C. personal data of customers and employees.

D. business continuity and disaster recovery.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Other than the Requirements Analysis document, in what project deliverable should Vendor Security Requirements be included?

A. Project Charter

B. Business Continuity Plan

C. Request For Proposals

D. Training Plan

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

NIST 800-30 defines cyber risk as a function of the likelihood of a given threat-source exercising a potential vulnerability, and:

A. the resulting impact of that adverse event on the organization.

B. the effectiveness of the control assurance framework.

C. the pre-disposing conditions of the vulnerability.

D. the probability of detecting damage to the infrastructure.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 7

What does non-repudiation mean in the context of web security?

A. Ensuring that all traffic between web servers must be securely encrypted

B. Providing permission to use web server resources according to security policies and specified procedures, so that the activity can be audited

C. Providing the sender of a message with proof of delivery, and the receiver with proof of the sender's identity

D. Ensuring that all data has not been altered in an unauthorized manner while being transmitted between web servers

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

Which of the following should be addressed in the organization's risk management strategy?

A. Acceptable risk management methodologies

B. Processes for responding to a security breach

C. Controls for each IT asset

D. Assignment of an executive responsible for risk management across the organization

正解: D

解説: (PassTest メンバーにのみ表示されます)

IIBA Certificate in Cybersecurity Analysis - IIBA-CCA 模擬練習