显示标签为“G2700”的博文。显示所有博文
显示标签为“G2700”的博文。显示所有博文

2013年9月27日星期五

最新のGIAC G2700試験の問題集

IT-Passports.comのGIACのG2700試験トレーニング資料はPDFぼ形式とソフトウェアの形式で提供して、IT-Passports.comのGIACのG2700試験問題と解答に含まれています。G2700認定試験の真実の問題に会うかもしれません。そんな問題はパーフェクトと称するに足って、効果的な方法がありますから、どちらのGIACのG2700試験に成功を取ることができます。IT-Passports.comのGIACのG2700問題集は総合的にすべてのシラバスと複雑な問題をカバーしています。IT-Passports.comのGIACのG2700テストの問題と解答は本物の試験の挑戦で、あなたのいつもの考え方を変換しなければなりません。

IT-Passports.comの専門家チームが君の需要を満たすために自分の経験と知識を利用してGIACのG2700認定試験対策模擬テスト問題集が研究しました。模擬テスト問題集と真実の試験問題がよく似ています。一目でわかる最新の出題傾向でわかりやすい解説と充実の補充問題があります。

試験番号:G2700問題集
試験科目:GIAC 「GIAC Certified ISO-2700 Specialist Practice Test」
問題と解答:全453問

IT-Passports.comはGIACのG2700認定試験に受かりたい各受験生に明確かつ顕著なソリューションを提供しました。当社はGIACのG2700認定試験の詳しい問題と解答を提供します。当社のIT専門家が最も経験と資格があるプロな人々で、我々が提供したテストの問題と解答は実際の認定試験と殆ど同じです。これは本当に素晴らしいことです。それにもっと大切なのは、IT-Passports.comのサイトは世界的でG2700試験トレーニングによっての試験合格率が一番高いです。

GIACのG2700認定試験を除いて、最近非常に人気がある試験はまたGIAC、Cisco、IBM、SAPなどの様々な認定試験があります。しかし、もしG2700認証資格を取りたいなら、IT-Passports.comのG2700問題集はあなたを願望を達成させることができます。試験の受験に自信を持たないので諦めることをしないでください。IT-Passports.comの試験参考書を利用することを通して自分の目標を達成することができますから。G2700認証資格を入手してから、他のIT認定試験を受験することもできます。IT-Passports.comの試験問題集を手にすると、どのような試験でも問題ではありません。

多くの人々は高い難度のIT認証試験に合格するのは専門の知識が必要だと思います。それは確かにそうですが、その知識を身につけることは難しくないとといわれています。IT業界ではさらに強くなるために強い専門知識が必要です。GIAC G2700認証試験に合格することが簡単ではなくて、GIAC G2700証明書は君にとってはIT業界に入るの一つの手づるになるかもしれません。しかし必ずしも大量の時間とエネルギーで復習しなくて、弊社が丹精にできあがった問題集を使って、試験なんて問題ではありません。

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/G2700.html

NO.1 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC   G2700   G2700過去問

NO.2 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC   G2700問題集   G2700過去問   G2700

NO.3 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC認定資格   G2700認定証   G2700   G2700   G2700認証試験

NO.4 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC参考書   G2700   G2700

NO.5 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC認定試験   G2700   G2700   G2700問題集

NO.6 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC   G2700認定資格   G2700   G2700   G2700

NO.7 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC問題集   G2700認証試験   G2700   G2700練習問題   G2700

NO.8 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC参考書   G2700過去問   G2700認証試験   G2700認定試験   G2700

NO.9 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC参考書   G2700   G2700

NO.10 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC   G2700   G2700   G2700練習問題

NO.11 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC   G2700   G2700   G2700

NO.12 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC   G2700   G2700   G2700過去問

NO.13 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC   G2700認定試験   G2700参考書   G2700問題集

NO.14 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC認定試験   G2700参考書   G2700過去問   G2700

NO.15 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC認定資格   G2700認定資格   G2700   G2700   G2700認証試験

NO.16 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC   G2700   G2700   G2700認定試験   G2700

NO.17 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC   G2700認定証   G2700参考書   G2700認定資格   G2700

NO.18 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC   G2700   G2700問題集   G2700

NO.19 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC   G2700認定証   G2700   G2700認証試験

NO.20 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC過去問   G2700問題集   G2700過去問   G2700   G2700練習問題   G2700認定試験

NO.21 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC認定試験   G2700参考書   G2700問題集

NO.22 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC認定試験   G2700認定試験   G2700   G2700

NO.23 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC問題集   G2700   G2700   G2700   G2700

NO.24 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC問題集   G2700認定試験   G2700   G2700   G2700認定試験

NO.25 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC過去問   G2700認証試験   G2700認定資格   G2700過去問   G2700   G2700認定試験

NO.26 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC   G2700   G2700   G2700   G2700練習問題

NO.27 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC   G2700   G2700練習問題   G2700

NO.28 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC練習問題   G2700認定資格   G2700   G2700   G2700   G2700

NO.29 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC   G2700   G2700認証試験   G2700認証試験

NO.30 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC   G2700認定試験   G2700練習問題   G2700   G2700過去問   G2700過去問

IT-Passports.comのGIACのG2700トレーニング資料を利用したら、初めて試験を受けるあなたでも一回で試験に合格できることを保証します。IT-Passports.comのGIACのG2700トレーニング資料を利用しても合格しないのなら、我々は全額で返金することができます。あなたに他の同じ値段の製品を無料に送って差し上げます。

2013年9月18日星期三

高品質のGIAC G2700「GIAC Certified ISO-2700 Specialist Practice Test」問題集

あなたの予算が限られている場合に完全な問題集を必要としたら、IT-Passports.comのGIACのG2700試験トレーニング資料を試してみてください。IT-Passports.comはあなたのIT認証試験の護衛になれて、現在インターネットで一番人気があるトレーニング資料が提供されたサイトです。GIACのG2700試験はあなたのキャリアのマイルストーンで、競争が激しいこの時代で、これまで以上に重要になりました。あなたは一回で気楽に試験に合格することを保証します。将来で新しいチャンスを作って、仕事が楽しげにやらせます。IT-Passports.comの値段よりそれが創造する価値ははるかに大きいです。

夢を持ったら実現するために頑張ってください。「信仰は偉大な感情で、創造の力になれます。」とゴーリキーは述べました。私の夢は最高のIT専門家になることです。その夢は私にとってはるか遠いです。でも、成功へのショートカットがを見つけました。IT-Passports.comのGIACのG2700試験トレーニング資料を利用して気楽に試験に合格しました。それはコストパフォーマンスが非常に高い資料ですから、もしあなたも私と同じIT夢を持っていたら、IT-Passports.comのGIACのG2700試験トレーニング資料を利用してください。それはあなたが夢を実現することを助けられます。

GIACのG2700認定試験に受かるためにがんばって勉強していれば、IT-Passports.comはあなたにヘルプを与えます。IT-Passports.com が提供したGIACのG2700問題集は実践の検査に合格したもので、最も良い品質であなたがGIACのG2700認定試験に合格することを保証します。

あなたはIT職員ですか。成功したいのですか。成功したいのならIT-Passports.comのGIACのG2700試験トレーニング資料を利用してください。当社の資料は実践の検証に合格したもので、あなたが首尾よくIT認証試験に合格することを助けます。IT-Passports.comのGIACのG2700トレーニング資料を手に入れたらあなたはIT業種でもっとよい昇進を持つようになり、高レベルのホワイトカラーのトリートメントを楽しむこともできます。あなたはまだ何を心配しているのですか。IT-Passports.comのGIACのG2700トレーニング資料はあなたのニーズを満たすことができますから、躊躇わずにIT-Passports.comを選んでください。IT-Passports.comはあなたと苦楽を共にして、一緒に挑戦に直面します。

試験の準備をするためにIT-Passports.comのGIACのG2700試験トレーニング資料を買うのは冒険的行為と思ったとしたら、あなたの人生の全てが冒険なことになります。一番遠いところへ行った人はリスクを背負うことを恐れない人です。また、IT-Passports.comのGIACのG2700試験トレーニング資料が信頼できるのは多くの受験生に証明されたものです。IT-Passports.comのGIACのG2700試験トレーニング資料を利用したらきっと成功できますから、IT-Passports.comを選ばない理由はないです。

試験番号:G2700問題集
試験科目:GIAC 「GIAC Certified ISO-2700 Specialist Practice Test」
問題と解答:全453問

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/G2700.html

NO.1 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC認証試験   G2700認証試験   G2700   G2700

NO.2 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC認定試験   G2700   G2700

NO.3 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC   G2700参考書   G2700認定資格

NO.4 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC   G2700   G2700   G2700練習問題   G2700参考書

NO.5 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC   G2700認定証   G2700認証試験

NO.6 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC   G2700参考書   G2700   G2700問題集   G2700認定資格

NO.7 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC練習問題   G2700   G2700認定資格   G2700認定試験

NO.8 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC   G2700認定資格   G2700   G2700

NO.9 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC認定証   G2700認証試験   G2700練習問題   G2700参考書   G2700練習問題

NO.10 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC認定証   G2700認定試験   G2700認定証

NO.11 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC   G2700問題集   G2700問題集   G2700認定試験   G2700

NO.12 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC   G2700過去問   G2700問題集   G2700   G2700認定資格

NO.13 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC   G2700問題集   G2700   G2700

NO.14 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC   G2700参考書   G2700認証試験   G2700過去問   G2700問題集

NO.15 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC練習問題   G2700   G2700認証試験   G2700参考書   G2700

NO.16 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC問題集   G2700   G2700   G2700認定資格   G2700練習問題

NO.17 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC   G2700参考書   G2700参考書   G2700認定試験

NO.18 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC過去問   G2700過去問   G2700   G2700認定試験

NO.19 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC過去問   G2700   G2700認定試験   G2700   G2700

NO.20 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC認定証   G2700   G2700   G2700過去問

NO.21 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC   G2700認定試験   G2700練習問題   G2700過去問   G2700認証試験

NO.22 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC   G2700   G2700

NO.23 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC過去問   G2700   G2700   G2700参考書   G2700過去問

NO.24 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC   G2700   G2700   G2700認証試験   G2700

NO.25 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC   G2700   G2700認定試験   G2700認定証

NO.26 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC練習問題   G2700認定資格   G2700   G2700認定試験   G2700

NO.27 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC認定試験   G2700   G2700過去問   G2700

NO.28 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC   G2700過去問   G2700認証試験   G2700   G2700

NO.29 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC参考書   G2700問題集   G2700認証試験   G2700   G2700   G2700

NO.30 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC過去問   G2700問題集   G2700認証試験   G2700   G2700

GIACのG2700認定試験は実は技術専門家を認証する試験です。 GIACのG2700認定試験はIT人員が優れたキャリアを持つことを助けられます。優れたキャリアを持ったら、社会と国のために色々な利益を作ることができて、国の経済が継続的に発展していることを進められるようになります。全てのIT人員がそんなにられるとしたら、国はぜひ強くなります。Pass4のGIACのG2700試験トレーニング資料はIT人員の皆さんがそんな目標を達成できるようにヘルプを提供して差し上げます。Pass4のGIACのG2700試験トレーニング資料は100パーセントの合格率を保証しますから、ためらわずに決断してPass4を選びましょう。

2013年8月18日星期日

GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVaの試験問題集が登場します

弊社のGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa勉強資料を利用したら、きっと試験を受けるための時間とお金を節約できます。IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa問題集を買う前に、一部の問題と解答を無料にダウンロードすることができます。PDFのバージョンとソフトウェアのバージョンがありますから、ソフトウェアのバージョンを必要としたら、弊社のカスタマーサービススタッフから取得してください。


IT-Passports.comはもっぱらITプロ認証試験に関する知識を提供するのサイトで、ほかのサイト使った人はIT-Passports.comが最高の知識源サイトと比較しますた。IT-Passports.comの商品はとても頼もしい試験の練習問題と解答は非常に正確でございます。


IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa試験問題資料は質が良くて値段が安い製品です。我々は低い価格と高品質の模擬問題で受験生の皆様に捧げています。我々は心からあなたが首尾よく試験に合格することを願っています。あなたに便利なオンラインサービスを提供して、GIAC GSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa試験問題についての全ての質問を解決して差し上げます。


GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa試験に合格することは容易なことではなくて、良い訓練ツールは成功の保証でIT-Passports.comは君の試験の問題を準備してしまいました。君の初めての合格を目標にします。


君はまずネットで無料な部分のGIAC認証試験をダウンロードして現場の試験の雰囲気を感じて試験に上手になりますよ。GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa認証試験に失敗したら弊社は全額で返金するのを保証いたします。


試験番号:GSSP-NET問題集

試験科目:GIAC 「GIAC GIAC Secure Software Programmer - C#.NET 」

問題と解答:全491問

試験番号:GCPM問題集

試験科目:GIAC 「GIAC Certified Project Manager Certification Practice Test」

問題と解答:全397問

試験番号:G2700問題集

試験科目:GIAC 「GIAC Certified ISO-2700 Specialist Practice Test」

問題と解答:全453問

試験番号:GSSP-NET-CSHARP問題集

試験科目:GIAC 「GIAC Secure Software Programmer - C#.NET」

問題と解答:全550問

試験番号:GSSP-JaVa問題集

試験科目:GIAC 「GIAC Secure Software Programmer – Java」

問題と解答:全275問

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/G2700.html


NO.1 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC   G2700認定証   G2700   G2700

NO.2 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC認定資格   G2700   G2700

NO.3 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC   G2700認定証   G2700認定試験   G2700認定証   G2700   G2700

NO.4 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC認証試験   G2700   G2700   G2700

NO.5 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC   G2700   G2700   G2700

NO.6 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC過去問   G2700   G2700   G2700参考書   G2700過去問

NO.7 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC問題集   G2700   G2700   G2700

NO.8 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC   G2700認定証   G2700   G2700参考書

NO.9 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC認定証   G2700   G2700

NO.10 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC練習問題   G2700   G2700   G2700

NO.11 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC認定試験   G2700認定資格   G2700問題集   G2700   G2700

NO.12 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC練習問題   G2700   G2700

NO.13 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC   G2700練習問題   G2700参考書   G2700過去問   G2700   G2700認定試験

NO.14 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC   G2700過去問   G2700   G2700過去問   G2700参考書

NO.15 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC過去問   G2700問題集   G2700   G2700認定試験

NO.16 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC   G2700   G2700問題集   G2700   G2700

NO.17 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC練習問題   G2700練習問題   G2700参考書

NO.18 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC問題集   G2700   G2700

NO.19 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC   G2700問題集   G2700   G2700   G2700認定試験

NO.20 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC   G2700   G2700過去問   G2700   G2700参考書   G2700

NO.21 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC   G2700   G2700認定試験

NO.22 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC   G2700問題集   G2700参考書   G2700   G2700   G2700認定証

NO.23 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC   G2700   G2700認定資格

NO.24 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC認定資格   G2700認定証   G2700

NO.25 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC過去問   G2700   G2700過去問   G2700練習問題   G2700

NO.26 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC   G2700練習問題   G2700   G2700

NO.27 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC認定試験   G2700認証試験   G2700   G2700   G2700問題集   G2700練習問題

NO.28 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC   G2700認定資格   G2700   G2700練習問題

NO.29 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC練習問題   G2700   G2700練習問題   G2700

NO.30 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC   G2700認定資格   G2700過去問   G2700   G2700

2013年8月14日星期三

GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP認定試験の最新教育資料

IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP試験トレーニング資料はあなたに時間とエネルギーを節約させます。あなたが何ヶ月でやる必要があることを我々はやってさしあげましたから。あなたがするべきことは、IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP試験トレーニング資料に受かるのです。あなた自身のために、証明書をもらいます。IT-Passports.com はあなたに必要とした知識と経験を提供して、GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP試験の目標を作ってあげました。IT-Passports.comを利用したら、試験に合格しないことは絶対ないです。


あなたはIT職員ですか。成功したいのですか。成功したいのならIT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP試験トレーニング資料を利用してください。当社の資料は実践の検証に合格したもので、あなたが首尾よくIT認証試験に合格することを助けます。IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARPトレーニング資料を手に入れたらあなたはIT業種でもっとよい昇進を持つようになり、高レベルのホワイトカラーのトリートメントを楽しむこともできます。あなたはまだ何を心配しているのですか。IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARPトレーニング資料はあなたのニーズを満たすことができますから、躊躇わずにIT-Passports.comを選んでください。IT-Passports.comはあなたと苦楽を共にして、一緒に挑戦に直面します。


君はほかのサイトや書籍もブラウズ するがもしれませんが、弊社の関連の学習資料と比較してからIT-Passports.comの商品の範囲が広くてまたネット上でダウンロードを発見してしまいました。IT-Passports.comだけ全面と高品質の問題集があるのではIT-Passports.comの専門家チームが彼らの長年のIT知識と豊富な経験で研究してしました。そして、IT-Passports.comに多くの受験生の歓迎されます。


試験番号:GSSP-NET問題集

試験科目:GIAC 「GIAC GIAC Secure Software Programmer - C#.NET 」

問題と解答:全491問

試験番号:GCPM問題集

試験科目:GIAC 「GIAC Certified Project Manager Certification Practice Test」

問題と解答:全397問

試験番号:G2700問題集

試験科目:GIAC 「GIAC Certified ISO-2700 Specialist Practice Test」

問題と解答:全453問

試験番号:GSSP-NET-CSHARP問題集

試験科目:GIAC 「GIAC Secure Software Programmer - C#.NET」

問題と解答:全550問

IT-Passports.comというサイトには全的な資源とGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARPの試験問題があります。それに、GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARPの試験の実践経験やテストダンプにも含まれています。IT-Passports.comは受験生たちを助けて試験の準備をして、試験に合格するサイトですから、受験生のトレーニングにいろいろな便利を差し上げます。あなたは一部の試用問題と解答を無料にダウンロードすることができます。IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARPの試験中に絶対な方法で転送することでなく、IT-Passports.comは真実かつ全面的な試験問題と解答を提供していますから、当社がオンラインするユニークなのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARPの試験トレーニング資料を利用したら、あなたが気楽に試験に合格することができるようになります。IT-Passports.comは合格率が100パーセントということを保証します。


あなたはIT職員ですか。今年で一番人気があるIT認証試験に申し込みましたか。もし「はい」と答えてくれたら、あなたはラッキですよ。IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARPトレーニング資料はあなたが100パーセント試験に合格することを保証しますから。これは絶対に真実なことです。IT業種でより高いレベルに行きたいのなら、IT-Passports.comを選ぶのは間違いなく選択です。当社のトレーニング資料はあなたが全てのIT認証試験に合格することを助けます。しかも値段が手頃です。信じないことはしないでください。IT-Passports.comを利用したら分かります。


IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP試験資料を買いたかったら、弊社は最も良いサービスと最も高品質な製品を提供します。弊社の認証試験のソフトウェアはもうベンダーとサードパーティーの認可を取り、大量なIT技術専門家たちがいますから、お客さんのニーズを答えるためにアウトラインに基づいてシリーズの製品を開発して、お客様の大量の要求を満たすことを保障します。GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP試験資料は最高の専門技術の内容を持っていますから、関連する知識の専門家と学者は研究する材料として利用することができます。弊社が提供した製品は一部の無料試用資料がありますから、購入する前にあなたのテストの質と適用性を保証します。


購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/G2700.html


NO.1 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC   G2700認証試験   G2700認定試験   G2700   G2700

NO.2 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC   G2700過去問   G2700参考書   G2700   G2700   G2700

NO.3 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC   G2700   G2700問題集   G2700

NO.4 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC練習問題   G2700   G2700   G2700練習問題

NO.5 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC   G2700参考書   G2700

NO.6 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC過去問   G2700   G2700認定証   G2700   G2700認証試験

NO.7 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC過去問   G2700   G2700練習問題   G2700

NO.8 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC   G2700認定証   G2700認定試験   G2700過去問   G2700

NO.9 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC参考書   G2700参考書   G2700   G2700   G2700

NO.10 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC   G2700認証試験   G2700過去問   G2700過去問   G2700参考書

NO.11 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC問題集   G2700   G2700認証試験   G2700練習問題   G2700

NO.12 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC認証試験   G2700   G2700   G2700

NO.13 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC練習問題   G2700練習問題   G2700

NO.14 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC認定資格   G2700認定試験   G2700   G2700認定証   G2700認定資格

NO.15 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC認定証   G2700   G2700   G2700

NO.16 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC問題集   G2700   G2700問題集   G2700   G2700過去問   G2700問題集

NO.17 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC認定試験   G2700   G2700過去問   G2700   G2700

NO.18 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC過去問   G2700   G2700   G2700参考書   G2700認定資格

NO.19 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC過去問   G2700   G2700   G2700   G2700問題集   G2700参考書

NO.20 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC   G2700   G2700問題集   G2700   G2700参考書   G2700認定証

NO.21 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC   G2700過去問   G2700認証試験   G2700

NO.22 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC認定証   G2700認定証   G2700   G2700練習問題   G2700

NO.23 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC   G2700   G2700練習問題   G2700   G2700

NO.24 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC   G2700認定証   G2700認証試験   G2700問題集

NO.25 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC認定資格   G2700   G2700   G2700認定資格   G2700   G2700認証試験

NO.26 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC認証試験   G2700参考書   G2700   G2700認定証   G2700問題集

NO.27 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC   G2700   G2700

NO.28 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC   G2700参考書   G2700参考書   G2700   G2700

NO.29 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC認定証   G2700   G2700練習問題   G2700問題集   G2700

NO.30 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC参考書   G2700   G2700過去問