显示标签为“GSSP-JaVa”的博文。显示所有博文
显示标签为“GSSP-JaVa”的博文。显示所有博文

2014年1月16日星期四

あなた向けのGIAC GSSP-JaVa認定試験の問題集

GIACのGSSP-JaVa認定試験の合格証明書はあなたの仕事の上で更に一歩の昇進で生活条件が向上することが助けられます。GIACのGSSP-JaVa認定試験はIT専門知識のレベルの検査でIT-Passports.comの専門IT専門家があなたのために最高で最も正確なGIACのGSSP-JaVa試験資料が出来上がりました。IT-Passports.comは全面的な最高のGIAC GSSP-JaVa試験の資料を含め、きっとあなたの最良の選択だと思います。

あなたはIT職員ですか。成功したいのですか。成功したいのならIT-Passports.comのGIACのGSSP-JaVa試験トレーニング資料を利用してください。当社の資料は実践の検証に合格したもので、あなたが首尾よくIT認証試験に合格することを助けます。IT-Passports.comのGIACのGSSP-JaVaトレーニング資料を手に入れたらあなたはIT業種でもっとよい昇進を持つようになり、高レベルのホワイトカラーのトリートメントを楽しむこともできます。あなたはまだ何を心配しているのですか。IT-Passports.comのGIACのGSSP-JaVaトレーニング資料はあなたのニーズを満たすことができますから、躊躇わずにIT-Passports.comを選んでください。IT-Passports.comはあなたと苦楽を共にして、一緒に挑戦に直面します。

GSSP-JaVa認定試験はずっと人気があるのです。最近IT試験を受けて認証資格を取ることは一層重要になりました。たとえばGIAC、IBM、Cisco、VMware、SAPなどのいろいろな試験は今では全部非常に重要な試験です。より多くの人々は複数の資格を取得するために多くのGSSP-JaVa試験を受験したいと思っています。もちろん、このようにすればあなたがすごい技能を身につけていることが証明されることができます。しかし、仕事しながら試験の準備をすることはもともと大変で、複数の試験を受験すれば非常に多くの時間が必要です。いまこのようなことで悩んいるのでしょうか。それは問題ではないですよ。IT-Passports.comあなたを時間を節約させことができますから。IT-Passports.comのさまざまなIT試験の問題集はあなたを受験したい任意の試験に合格させることができます。GSSP-JaVa認定試験などの様々な認定試験で、受験したいなら躊躇わずに申し込んでください。心配する必要はないです。

今の競争の激しいのIT業界の中にGIAC GSSP-JaVa認定試験に合格して、自分の社会地位を高めることができます。弊社のIT業で経験豊富な専門家たちが正確で、合理的なGIAC GSSP-JaVa認証問題集を作り上げました。 弊社の勉強の商品を選んで、多くの時間とエネルギーを節約こともできます。

試験番号:GSSP-JaVa問題集
試験科目:GIAC 「GIAC Secure Software Programmer – Java」
問題と解答:全275問

IT-Passports.comは専門的なIT認証サイトで、成功率が100パーセントです。これは多くの受験生に証明されたことです。IT-Passports.comにはIT専門家が組み立てられた団体があります。彼らは受験生の皆さんの重要な利益が保障できるように専門的な知識と豊富な経験を活かして特別に適用性が強いトレーニング資料を研究します。その資料が即ちGIACのGSSP-JaVa試験トレーニング資料で、問題集と解答に含まれていますから。

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/GSSP-JaVa.html

NO.1 You have written the following code snippet.
1. public class Read {
2. protected int ReadText(int x) { return 0; }
3. }
4. class Text extends Read {
5. /*insert code here*/
6. }
Which of the following methods, inserted independently at line 5, will compile?
Each correct answer represents a complete solution. Choose all that apply.
A. private int ReadText(long x) { return 0; }
B. protected long ReadText(int x, int y) { return 0; }
C. protected long ReadText(long x) { return 0; }
D. protected int ReadText(long x) { return 0; }
E. private int ReadText(int x) { return 0; }
F. public int ReadText(int x) { return 0; }
G. protected long ReadText(int x) { return 0; }
Answer: A,B,C,D,F

GIAC   GSSP-JaVa認定資格   GSSP-JaVa認証試験   GSSP-JaVa過去問

NO.2 Mark works as a Programmer for InfoTech Inc. He develops the following deployment descriptor code.
<web-app . . . .
>
<display-name>A Secure Application</display-name><servlet>
..
.
<security-role-ref
>
<role-name>Manager</role-name>
<role-link>Admin</role-link>
</security-role-ref>
</servlet>
<security-role>
<role-name>Programmer</role-name>
</security-role>
<security-role>
<role-name>Admin</role-name>
</security-role>
<security-role>
<role-name>Employee</role-name>
</security-role>
</web-app>
Which of the following is a valid isUserInRole() method call that can be made if request is the
HttpServletRequest request?
A. request.isUserInRole("Programmer");
B. request.isUserInRole("Manager");
C. request.isUserInRole("Admin");
D. request.isUserInRole("Employee");
Answer: B

GIAC認定証   GSSP-JaVa認定試験   GSSP-JaVa認定証   GSSP-JaVa   GSSP-JaVa過去問

NO.3 Given a code of a class named PrintString that prints a string.
1. public class PrintString{
2. public static void main(String args[]){
3. /*insert code here */
4. /* insert code here */
5. System.out.println(str);
6. }
7. }
Which of the following code fragments can be inserted in the class PrintString to print the output
"4247"?
Each correct answer represents a complete solution. Choose all that apply.
A. StringBuilder str= new StringBuilder("123456789");
str.delete(0,3).replace(1,3,"24").delete(4,6);
B. StringBuffer str= new StringBuffer("123456789");
str.delete(0,3).replace(1,3,"24").delete(4,6);
C. StringBuffer str=new StringBuffer("123456789");
str.substring(3,6).delete(1,2).insert(1,"24");
D. StringBuilder str= new StringBuilder("123456789");
str.deleteCharAt(6).replace(1,3,"24").delete(0,3);
E. String str="123456789";
str=(str-"123").replace(1,3,"24")-"89";
Answer: A,B

GIAC認定証   GSSP-JaVa問題集   GSSP-JaVa   GSSP-JaVa

NO.4 Mark works as a Programmer for InfoTech Inc. He develops a Website that uses HTML and processes
HTML validation. Which of the following are the advantages of the HTML application?
Each correct answer represents a complete solution. Choose all that apply.
A. It provides password protection for a Web page or directory
B. It can be accessed by more visitors.
C. It provides faster loading.
D. It is easier to update and maintain the site.
E. It protects the source or images of a HTML Web page.
F. It puts less load on the server.
Answer: B,C,D,F

GIAC練習問題   GSSP-JaVa過去問   GSSP-JaVa練習問題   GSSP-JaVa過去問   GSSP-JaVa認定試験

NO.5 Mark works as a Programmer for InfoTech Inc. He develops a deployment descriptor code that contains
three valid
<security-constraint> elements.
All of them constraining a Web resource Res1, the
<auth-constraint> sub-element of the <security-constraint>
elements are as follows.
<auth-constraint>Admin</auth-constraint>
<auth-constraint>Manager</auth-constraint>
<auth-constraint/>
Which of the following can access the resource Res1?
A. Only Manager can access the resource.
B. No one can access the resource.
C. Everyone can access the resource.
D. Only Admin can access the resource.
Answer: B

GIAC認証試験   GSSP-JaVa認定資格   GSSP-JaVa

NO.6 Mark writes a class Practice.java. This class needs to access the com.bar.Test class that is stored in
the Test.jar file in the directory /practice. How would you compile your code?
A. javac -classpath /practice/Test.jar Practice.java
B. javac -classpath /practice/ Practice.java
C. javac -classpath /practice/Test.jar/com/bar Practice.java
D. javac -classpath /practice Practice.java
Answer: A

GIAC過去問   GSSP-JaVa   GSSP-JaVa

NO.7 Which of the following statements about a JAR file are true?
Each correct answer represents a complete solution. Choose all that apply.
A. It cannot be accessed through a class path, nor they can be used by java and javac.
B. It is used to compress and archive data.
C. It can be moved from one computer to another.
D. It is created by using the jar command.
Answer: B,C,D

GIAC   GSSP-JaVa問題集   GSSP-JaVa認定証   GSSP-JaVa認証試験

NO.8 Which of the following functions are performed by methods of the
HttpSessionActivationListener interface?
Each correct answer represents a complete solution. Choose all that apply.
A. Notifying the object when it is bound to a session.
B. Notifying an attribute that a session has just migrated from one JVM to another.
C. Notifying the object when it is unbound from a session.
D. Notifying an attribute that a session is about to migrate from one JVM to another.
Answer: B,D

GIAC認証試験   GSSP-JaVa認定試験   GSSP-JaVa認定証   GSSP-JaVa問題集   GSSP-JaVa練習問題

NO.9 Which of the following deployment descriptor elements must contain the <transport-guarantee>
element as its mandatory sub-element?
A. <user-data-constraint>
B. <web-resource-collection>
C. <auth-constraint>
D. <login-config>
Answer: A

GIAC   GSSP-JaVa   GSSP-JaVa過去問   GSSP-JaVa練習問題   GSSP-JaVa認定証

NO.10 Which of the following statements about programmatic security are true?
Each correct answer represents a complete solution. Choose all that apply.
A. The bean provider is responsible for writing code for programmatic security.
B. It is also called as instance level security.
C. It is implemented using methods of the EJBContext interface.
D. It is implemented using the methods of the UserTransaction interface.
Answer: A,B,C

GIAC   GSSP-JaVa練習問題   GSSP-JaVa   GSSP-JaVa

NO.11 Which of the following statements are true?
Each correct answer represents a complete solution. Choose all that apply.
A. An inner class cannot be defined as private.
B. An inner class cannot be defined as protected.
C. An inner class can be defined as private.
D. An inner class can extend another class.
Answer: C,D

GIAC認定証   GSSP-JaVa認定資格   GSSP-JaVa過去問   GSSP-JaVa認定試験

NO.12 John works as a Software Developer for VenTech Inc. He writes the following code using Java.
public class vClass extends Thread
{
public static void main(String args[])
{
vClass vc=new vClass();
vc.run();
}
public void start()
{
for(int k=0;k<20;k++)
{
System.out.println("The value of k = "+k);
}
}
}
What will happen when he attempts to compile and execute the application.?
A. The application will compile successfully and the values from 0 to 19 will be displayed as the output.
B. A compile-time error will occur indicating that no run() method is defined for the Thread class.
C. A runtime error will occur indicating that no run() method is defined for the Thread class.
D. The application will compile successfully but will not display anything as the output.
Answer: D

GIAC   GSSP-JaVa   GSSP-JaVa過去問   GSSP-JaVa参考書

NO.13 You work as a programmer for PassGuide.Inc. You have a session object named session1 with an
attribute named Attribute1, and an HttpSessionBindingEvent object binding1 bound to session1.
Which of the following will be used to retrieve Attribute1?
Each correct answer represents a complete solution. Choose all that apply.
A. Object obj=binding1.getSession().getAttribute("Attribute1");
B. Object obj=binding1.getAttribute("Attribute1");
C. Long MyAttribute=session1.getAttribute("Attribute1");
D. String str1=session1.getAttribute("Attribute1");
E. Object obj=session1.getAttribute("Attribute1");
Answer: A,E

GIAC認証試験   GSSP-JaVa認定試験   GSSP-JaVa認証試験

NO.14 Which of the following classes is an engine class that provides an opaque representation of
cryptographic parameters?
A. DSAPublicKeySpec
B. AlgorithmParameterGenerator
C. DSAParameterSpec
D. AlgorithmParameters
Answer: D

GIAC認定証   GSSP-JaVa認証試験   GSSP-JaVa

NO.15 Which of the following statements correctly describe the features of the singleton pattern?
Each correct answer represents a complete solution. Choose all that apply.
A. Singletons are used to control object creation by limiting the number to one but allowing the flexibility to
create more objects if the situation changes.
B. Singletons can only be stateless, providing utility functions that need no more information than their
parameters.
C. A singleton class may disappear if no object holds a reference to the Singleton object, and it will be
reloaded later when the singleton is needed again.
D. The behavior of a singleton can be obtained by static fields and methods such as
java.lang.Math.sin(double).
Answer: A,C,D

GIAC   GSSP-JaVa認定資格   GSSP-JaVa   GSSP-JaVa

NO.16 Which of the following statements is true?
A. All UTF characters are eight bits long.
B. All UTF characters are all sixteen bits long.
C. All UTF characters are twenty four bits long.
D. All bytecode characters are sixteen bits long.
E. All unicode characters are sixteen bits long.
Answer: E

GIAC練習問題   GSSP-JaVa   GSSP-JaVa認証試験

NO.17 Which of the following elements are the subelements of the mime-mapping element in a
deployment descriptor file?
Each correct answer represents a complete solution. Choose all that apply.
A. exception-type
B. error-code
C. extension
D. mime-type
E. servlet-class
Answer: C,D

GIAC認定試験   GSSP-JaVa   GSSP-JaVa認定証

NO.18 You work as a Software Developer for UcTech Inc. You create a session using the HttpSession
interface. You want the attributes to be informed when the session is moved from one JVM to another and
also when an attribute is added or removed from the session. Which of the following interfaces can you
use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.
A. HttpSessionBindingListener
B. HttpSessionListener
C. HttpSessionActivationListener
D. HttpSessionAttributeListener
Answer: C,D

GIAC認定試験   GSSP-JaVa認定証   GSSP-JaVa   GSSP-JaVa   GSSP-JaVa問題集

NO.19 Which of the following methods of the EJBContext interface can be called by both the BMT and CMT
beans?
Each correct answer represents a complete solution. Choose all that apply.
A. getCallerPrincipal()
B. getRollbackOnly()
C. getUserTransaction()
D. isCallerInRole()
Answer: A,D

GIAC問題集   GSSP-JaVa   GSSP-JaVa問題集   GSSP-JaVa認定証

NO.20 John works as a Programmer for Technostar Inc. He writes the following code using Java.
1. class WrapperClass{
2. public static void main(String[] argv){
3. String str2 = Double.toString(12);
4. String str1 = Double.toHexString(12);
5. System.out.println(str1+str2);
6. }
7. }
What will happen when John attempts to compile and execute the code?
A. It will not compile because the Double class does not contain the toHexString() method.
B. It will compile and execute successfully and will display 8p312 as the output.
C. It will compile and execute successfully and will display 0x1.8p312.0 as the output.
D. It will not compile because the Double class does not contain the toString() method.
Answer: C

GIAC   GSSP-JaVa認定証   GSSP-JaVa   GSSP-JaVa

GIACのGSSP-JaVa試験に合格することは容易なことではなくて、良い訓練ツールは成功の保証でIT-Passports.comは君の試験の問題を準備してしまいました。君の初めての合格を目標にします。

2013年8月18日星期日

GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVaの試験問題集が登場します

弊社のGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa勉強資料を利用したら、きっと試験を受けるための時間とお金を節約できます。IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa問題集を買う前に、一部の問題と解答を無料にダウンロードすることができます。PDFのバージョンとソフトウェアのバージョンがありますから、ソフトウェアのバージョンを必要としたら、弊社のカスタマーサービススタッフから取得してください。


IT-Passports.comはもっぱらITプロ認証試験に関する知識を提供するのサイトで、ほかのサイト使った人はIT-Passports.comが最高の知識源サイトと比較しますた。IT-Passports.comの商品はとても頼もしい試験の練習問題と解答は非常に正確でございます。


IT-Passports.comのGIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa試験問題資料は質が良くて値段が安い製品です。我々は低い価格と高品質の模擬問題で受験生の皆様に捧げています。我々は心からあなたが首尾よく試験に合格することを願っています。あなたに便利なオンラインサービスを提供して、GIAC GSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa試験問題についての全ての質問を解決して差し上げます。


GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa試験に合格することは容易なことではなくて、良い訓練ツールは成功の保証でIT-Passports.comは君の試験の問題を準備してしまいました。君の初めての合格を目標にします。


君はまずネットで無料な部分のGIAC認証試験をダウンロードして現場の試験の雰囲気を感じて試験に上手になりますよ。GIACのGSSP-NET GCPM G2700 GSSP-NET-CSHARP GSSP-JaVa認証試験に失敗したら弊社は全額で返金するのを保証いたします。


試験番号:GSSP-NET問題集

試験科目:GIAC 「GIAC GIAC Secure Software Programmer - C#.NET 」

問題と解答:全491問

試験番号:GCPM問題集

試験科目:GIAC 「GIAC Certified Project Manager Certification Practice Test」

問題と解答:全397問

試験番号:G2700問題集

試験科目:GIAC 「GIAC Certified ISO-2700 Specialist Practice Test」

問題と解答:全453問

試験番号:GSSP-NET-CSHARP問題集

試験科目:GIAC 「GIAC Secure Software Programmer - C#.NET」

問題と解答:全550問

試験番号:GSSP-JaVa問題集

試験科目:GIAC 「GIAC Secure Software Programmer – Java」

問題と解答:全275問

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/G2700.html


NO.1 Mark works as an Office Assistant for uCertify Inc. He is responsible for managing office documents.
Today, after opening a word document, Mark noticed that the other opened documents are closed
suddenly. After reopening those documents, Mark found some modifications in the documents. He
contacted his Security Administrator and came to know that there is a virus program installed in the
operating system. Which of the following types of virus has attacked the operating system?
A. Data file
B. Macro
C. Polymorphic
D. Boot sector
Answer: A

GIAC   G2700認定証   G2700   G2700

NO.2 Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.
A. These are considered as an indicator of threats coupled with vulnerability.
B. These can be removed completely by taking proper actions.
C. These can be mitigated by reviewing and taking responsible actions based on possible risks.
D. These can be analyzed and measured by the risk analysis process.
Answer: A,C,D

GIAC認定資格   G2700   G2700

NO.3 You work as the Human Resource Manager for uCertify Inc. You need to recruit some candidates for
the marketing department of the organization. Which of the following should be defined to the new
employees of the organization before they have joined?
Each correct answer represents a complete solution. Choose all that apply.
A. Marketing tips and tricks
B. Organization's network topology
C. Job roles
D. Organization's security policy
Answer: C,D

GIAC   G2700認定証   G2700認定試験   G2700認定証   G2700   G2700

NO.4 Which of the following are the exceptions of the Data Protection Act?
Each correct answer represents a complete solution. Choose all that apply.
A. Section 36 - Domestic purposes
B. Section 28 - National security
C. Section 55 - Unlawful obtaining of personal data
D. Section 29 - Crime and taxation
Answer: A,B,D

GIAC認証試験   G2700   G2700   G2700

NO.5 You work as a Security Administrator for uCertify Inc. You have been assigned the task to verify the
identity of the employees recruited in your organization. Which of the following components of security
deals with an employee's verification in the organization?
A. Network Security
B. Physical security
C. Access security
D. Human resource security
Answer: D

GIAC   G2700   G2700   G2700

NO.6 Which of the following is the designing phase of the ISMS?
A. Check
B. Plan
C. Act
D. Do
Answer: B

GIAC過去問   G2700   G2700   G2700参考書   G2700過去問

NO.7 You work as an Information Security Manager for uCertify Inc. You are working on the
documentation of control A.10.1.1. What is the purpose of control A.10.1.1.?
A. It is concerned with the documentation of the human resource security to make recruitments clear to
the organization.
B. It is concerned with the documentation of the supply chain management.
C. It is concerned with the documentation of operating procedures to ensure the correct and secure use of
information processing facilities.
D. It is concerned with the documentation of the disaster recovery management to ensure proper backup
technologies.
Answer: C

GIAC問題集   G2700   G2700   G2700

NO.8 The disciplined and structured process, that integrates information security and risk management
activities into the System Development Life Cycle, is provided by the risk management framework.
Choose the appropriate RMF steps.
A.
Answer: A

GIAC   G2700認定証   G2700   G2700参考書

NO.9 Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the
following formulas best describes the Single Loss Expectancy (SLE)?
A. SLE = Asset Value (AV) * Exposure Factor (EF)
B. SLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
C. SLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
D. SLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)
Answer: A

GIAC認定証   G2700   G2700

NO.10 CORRECT TEXT
Fill in the blank with an appropriate phrase.
_________accord describes the minimum regulatory capital to be allocated by each bank based on its
risk profile of assets.
Answer: Basel ll

GIAC練習問題   G2700   G2700   G2700

NO.11 Which of the following controls are administrative in nature?
A. Directive controls
B. Recovery controls
C. Preventive controls
D. Detective controls
Answer: A

GIAC認定試験   G2700認定資格   G2700問題集   G2700   G2700

NO.12 Mark works as a Network Security Administrator for uCertify Inc. An employee of the organization
comes to Mark and tells him that a few months ago, the employee had filled an online bank form due to
some account related work. Today, when again visiting the site, the employee finds that some of his
personal information is still being displayed in the webpage. Which of the following types of cookies
should be disabled by Mark to resolve the issue?
A. Session
B. Temporary
C. Secure
D. Persistent
Answer: D

GIAC練習問題   G2700   G2700

NO.13 Mark works as a Network Security Administrator for uCertify Inc. He has been assigned the task of
installing a MySQL server. Mark wants to monitor only the data that is directed to or originating from the
server and he also wants to monitor running processes, file system access and integrity, and user logins
for identifying malicious activities. Which of the following intrusion detection techniques will Mark use to
accomplish the task?
A. Network-based IDS
B. Signature-based IDS
C. Anomaly-based IDS
D. Host-based IDS
Answer: D

GIAC   G2700練習問題   G2700参考書   G2700過去問   G2700   G2700認定試験

NO.14 You work as an Information Security Manager for uCertify Inc. You need to make the
documentation on change management. What are the advantages of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Improved productivity of users due to more stable and better IT services
B. Improved IT personnel productivity, since there is a reduced number of urgent changes and a back-out
of erroneous changes
C. Improved adverse impact of changes on the quality of IT services
D. Increased ability to absorb frequent changes without making an unstable IT environment
Answer: A,B,D

GIAC   G2700過去問   G2700   G2700過去問   G2700参考書

NO.15 You work as an Information Security Officer for uCertify Inc. You need to create an asset management
plan differentiating fixed assets from inventory items. How will you differentiate assets from inventory
items?
A. Inventory items are sold.
B. Assets are temporary usually.
C. Inventory items are permanent.
D. Assets cannot be used.
Answer: A

GIAC過去問   G2700問題集   G2700   G2700認定試験

NO.16 Which of the following should be considered while calculating the costs of the outage?
Each correct answer represents a complete solution. Choose all that apply.
A. Sales aspect of the business
B. Cost of low productivity
C. Innovations in electronic funds transfer
D. Cost of lost income from missed sales
Answer: B,D

GIAC   G2700   G2700問題集   G2700   G2700

NO.17 Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?
A. Separation of Duties
B. Due Care
C. Acceptable Use
D. Need to Know
Answer: D

GIAC練習問題   G2700練習問題   G2700参考書

NO.18 Which of the following is a fast-emerging global sector that advises individuals and corporations on
how to apply the highest ethical standards to every aspect of their business?
A. Service Capacity Management (SCM)
B. Business Capacity Management (BCM)
C. Resource Capacity Management (RCM)
D. Integrity Management Consulting
Answer: D

GIAC問題集   G2700   G2700

NO.19 CORRECT TEXT
Fill in the blank with the appropriate term.
________ is a powerful and low-interaction open source honeypot.
Answer: Honeyd

GIAC   G2700問題集   G2700   G2700   G2700認定試験

NO.20 Which of the following are the basics of Business Continuity Management?
Each correct answer represents a complete solution. Choose all that apply.
A. Implementation of a risk assessment technique to identify the causes and consequences of failures
B. Regular checking of business continuity plans
C. Identification of authentication techniques according to the requirements
D. Identification of human resources according to the requirements
Answer: A,B,D

GIAC   G2700   G2700過去問   G2700   G2700参考書   G2700

NO.21 Which of the following is used for secure financial transactions over the Internet?
A. ATM
B. VPN
C. SSL
D. SET
Answer: D

GIAC   G2700   G2700認定試験

NO.22 Mark works as a System Administrator for uCertify Inc. He is responsible for securing the network of
the organization. He is configuring some of the advanced features of the Windows firewall so that he can
block the client machine from responding to pings. Which of the following advanced setting types should
Mark change for accomplishing the task?
A. ICMP
B. SNMP
C. UDP
D. SMTP
Answer: A

GIAC   G2700問題集   G2700参考書   G2700   G2700   G2700認定証

NO.23 You work as a Network Administrator for uCertify Inc. The organization has constructed a cafeteria for
their employees and you are responsible to select the access control method for the cafeteria.
There are a few conditions for giving access to the employees, which are as follows:
1. Top level management can get access any time.
2. Staff members can get access during the specified hours.
3. Guests can get access only in working hours.
Which of the following access control methods is suitable to accomplish the task?
A. Discretionary access control
B. Lattice-based access control
C. Attribute-based access control
D. Rule-based access control
Answer: D

GIAC   G2700   G2700認定資格

NO.24 Rick works as a Computer Forensic Investigator for BlueWells Inc. He has been informed that some
confidential information is being leaked out by an employee of the company. Rick suspects that someone
is sending the information through email. He checks the emails sent by some employees to other
networks. Rick finds out that Sam, an employee of the Sales department, is continuously sending text files
that contain special symbols, graphics, and signs. Rick suspects that Sam is using the Steganography
technique to send data in a disguised form. Which of the following techniques is Sam using?
Each correct answer represents a part of the solution. Choose all that apply.
A. Linguistic steganography
B. Text Semagrams
C. Technical steganography
D. Perceptual masking
Answer: A,B

GIAC認定資格   G2700認定証   G2700

NO.25 Qualitative risk analysis includes judgment, intuition, and experience. Which of the following methods
are used to perform qualitative risk analysis?
Each correct answer represents a complete solution. Choose all that apply.
A. Egress filtering
B. Checklists
C. Delphi technique
D. Brainstorming
Answer: B,C,D

GIAC過去問   G2700   G2700過去問   G2700練習問題   G2700

NO.26 Which of the following are the uses of cryptography as defined in a policy document?
Each correct answer represents a complete solution. Choose all that apply.
A. Backup
B. Control of keys
C. Applications supporting cryptography
D. Recovery
Answer: A,B,C

GIAC   G2700練習問題   G2700   G2700

NO.27 Which of the following is a Restrict Anonymous registry value that allows users with explicit
anonymous permissions?
A. 2
B. 3
C. 1
D. 0
Answer: A

GIAC認定試験   G2700認証試験   G2700   G2700   G2700問題集   G2700練習問題

NO.28 Which of the following phases of the PDCA model is the monitoring and controlling phase of the
Information Security Management System (ISMS)?
A. Check
B. Plan
C. Do
D. Act
Answer: A

GIAC   G2700認定資格   G2700   G2700練習問題

NO.29 You work as an Information Security Manager for uCertify Inc. You are working on communication and
organization management. You need to create the documentation on change management.
Which of the following are the main objectives of change management?
Each correct answer represents a complete solution. Choose all that apply.
A. Minimal disruption of services
B. Reduction of inventory in accordance with revenue
C. Economic utilization of resources involved in the change
D. Reduction in back-out activities
Answer: A,C,D

GIAC練習問題   G2700   G2700練習問題   G2700

NO.30 A project plan includes the Work Breakdown Structure (WBS) and cost estimates. Which of the following
are the parts of a project plan?
Each correct answer represents a complete solution. Choose all that apply.
A. Risk identification
B. Security Threat
C. Project schedule
D. Team members list
E. Risk analysis
Answer: A,C,D,E

GIAC   G2700認定資格   G2700過去問   G2700   G2700