Internalinformationforreferenceonly1CISSP2016－2018BrainDumps(考生注意：本真题回忆建议答案仅供参考)2018.11.281、InMandatoryAccessControl,sensitivitylabelsattachedtoobjectscontainwhatinformation?A.Theitem'sclassificationB.Theitem'sclassificationandcategorysetC.Theitem'scategoryD.Theitems'needtoknow建议答案：B2、Whenitcomestomagneticmediasanitization,whatdifferencecanbemadebetweenclearingandpurginginformation?A.Clearingcompletelyerasesthemediawhereaspurgingonlyremovesfileheaders,allowingtherecoveryoffiles.B.Clearingrendersinformationunrecoverablebyakeyboardattackandpurgingrendersinformationunrecoverableagainstlaboratoryattack.C.Theybothinvolverewritingthemedia.D.Clearingrendersinformationunrecoverableagainstalaboratoryattackandpurgingrendersinformationunrecoverabletoakeyboardattack.建议答案：B3、Whatsecuritymodelisdependentonsecuritylabels?A.DiscretionaryaccesscontrolB.Label-basedaccesscontrolC.MandatoryaccesscontrolD.Non-discretionaryaccesscontrol建议答案：CInternalinformationforreferenceonly24、Whatisthewindowoftimeforrecoveryofinformationprocessingcapabilitiesbasedon?A.QualityofthedatatobeprocessedB.NatureofthedisasterC.CriticalityoftheoperationsaffectedD.Applicationsthataremainframebased建议答案：C5、Chrissyisanewemployeeatacoffeeshop.Shemeetsthreeotherco-workersonherfirstday.Sincetheyallworkdifferentshifts,sometimesopeningthestoreandsometimesclosingthestore,theyhavebeengiventhestoresecuritycode.Chrissyasksherbossifshewillgetthecode,andherbosssays"No,youwon’tneeditbecauseyou’reworkingthemid-dayshift."Whatsecurityprincipleisthecoffeeshopmanagerimplementing?A.PhysicalcontrolB.LeastprivilegeC.SeparationofdutiesD.Collusion建议答案：B6、Recentlypassedoverforanexecutivepromotion,Carolisanxioustohearaboutamajorcompanyannouncementwhichwillmostlikelyrevealthenewhire.KnowingthatthePRdepartmentdoesnotregularlyshreddocuments,shesnoopsaroundthehallwaysafterhours,andfindsamemonexttotheprinterthatgiveshertheinformationthatwillbereleasedtothepublicnextweek.Whatkindofattackha...
