تست رایگان

CISSP Domain 2 — Asset Security

چند سوال نمونه از این آزمون را پاسخ دهید و بلافاصله نتیجه‌ی خود را ببینید.

۲ سوال نمونه

سوال ۱ از ۲ چندگزینه‌ای

A claims service receives files over TLS, decrypts them at a gateway, writes a temporary plaintext copy to shared storage, and later imports them into an encrypted database. The shared storage permits reads by an unrelated support group. The architecture review currently lists the entire flow as encrypted. Which change most directly closes the identified access gap while preserving the legitimate processing flow?

Encrypt the shared staging volume while retaining automatic decryption and read access for its existing processing and support groups. Import the files more frequently and delete each staging copy after import, while retaining the existing shared-storage permissions. Remove unrelated users from the encrypted database and review its access logs, while leaving the gateway's staging permissions unchanged. Restrict access to staged claims to approved processing roles and protect that storage according to the records' classification.

سوال ۲ از ۲ قضاوت موقعیتی SJT

A workstation provides read-only access to historical equipment records. Vendor support ends this week; a validated replacement will be ready in four weeks and cannot be accelerated. Operators must retrieve records within five minutes; requests routed through an intermediary typically wait an hour. A tested arrangement can restrict the workstation to a monitored local console, remove network access and block new data. The owner can approve this temporary arrangement. What is best?

Choose the most appropriate action.

Export the records into a new untested viewer and retire the workstation as soon as a sample of files opens.

Keep the existing workstation arrangement until operations reports a fault, using the approved replacement as a future contingency.

Approve the tested restricted arrangement with a four-week retirement date, then transfer and verify the retained records on the replacement.

Disconnect the workstation now and require operations to submit requests for staff to retrieve records from the local console.