EXIN EX0-105 問題集

質問 1：
Which type of malware is a program that collects information of the computer user and sends it to another party?
A. Trojan
B. Spyware
C. Logic Bomb
D. Storm Worm
正解：B

質問 2：
A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the companys staff. Which kind of security measure could have prevented this?
A. An organizational security measure
B. A physical security measure
C. A technical security measure
正解：B

質問 3：
What is an example of a good physical security measure?
A. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
B. All employees and visitors carry an access pass.
C. Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.
正解：B

質問 4：
Which threat can materialize as a result of the absence of physical security?
A. A worm infects several servers due to insufficient port filtering.
B. Software stops working because the license has expired.
C. A USB stick with confidential information is lost by an employee.
D. Systems malfunction due to spikes in the power supply.
正解：D

質問 5：
A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?
A. Establishing a balance between the costs of an incident and the costs of a security measure
B. Determining relevant vulnerabilities and threats
C. Identifying assets and their value
D. Determining the costs of threats
正解：D

質問 6：
In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?
A. The authentication step checks the username against a list of users who have access to the system.
B. The system determines whether access may be granted by determining whether the token used is authentic.
C. In the second step, you make your identity known, which means you are given access to the system.
D. During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.
正解：B

質問 7：
What is the main reliability aspect of information besides Confidentiality and Integrity?
A. Authenticity
B. Availability
C. Authorization
D. Accounting
正解：B