最新のCGRC問題集で試験を準備する

ISC CGRC 試験概要:

ISC CGRC 試験シラバストピック:

ISC Certified in Governance Risk and Compliance 認定 CGRC 試験問題：

1. One of the following sentences can appropriately help Authorizing Officials and CISOs define an accreditation boundary.
Response:

A) The components of an information system that are under the same management authority
B) Internal and external systems that are interconnected through the internet.
C) The set of system elements comprising the system to be authorized for operation or use

2. Which of the following is an Information Assurance (IA) model that protects and defends information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non- repudiation?
Response:

A) Parkerian Hexad
B) Five Pillars model
C) Capability Maturity Model (CMM)
D) Classic information security model

3. The phase 0 of Risk Management Framework (RMF) is known as strategic risk assessment planning.
Which of the following processes take place in phase 0?
Each correct answer represents a complete solution. Choose all that apply.
Response:

A) Establish criteria that will be used to evaluate threats, vulnerabilities, and controls.
B) Establish criteria that will be used to classify and rank data assets.
C) Identify threats, vulnerabilities, and controls that will be evaluated.
D) Review documentation and technical data.
E) Apply classification criteria to rank data assets and related IT resources.

4. The documentation of a predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyber attacks against an organization's information system(s).
Response:

A) Disaster Recovery Plan
B) Incident Response Plan
C) Contingency Plan
D) Operations Plan

5. Which of the following are included in Administrative Controls? Each correct answer represents a complete solution. Choose all that apply.
Response:

A) Implementing change control procedures
B) Monitoring for intrusion
C) Developing policy
D) Conducting security-awareness training
E) Screening of personnel

質問と回答：