绗?1 绔犺蹇嗗€欓€夋睜锛氬畨鍏ㄦ不鐞嗐€佸師鍒欎笌鏀跨瓥
杩欎竴椤典笉鏄渶缁堣蹇嗘硶锛岃€屾槸鍏堟妸鈥滃摢浜涗笢瑗垮€煎緱鑳屸€濇憡寮€銆?/p>
鍚庨潰姣忎釜 P1 鐭ヨ瘑鐐归兘瑕佺户缁蛋瀹屾暣娴佺▼锛氬€欓€夋睜 -> 涓€涓釜绛?-> 娣樻卑鐞嗙敱 -> 閫変富璁版硶 -> 鍐欐晠浜?-> 鍥炲埌鑰冮妫€鏌ャ€?/p>
鏈珷鎶藉彇缁撴灉
- 鍊欓€夌煡璇嗙偣锛?2 涓€?/li>
- P1锛?5 涓€?/li>
- P2锛?8 涓€?/li>
- P3锛? 涓€?/li>
- 绔犺妭鏈锛?0 涓€?/li>
- 瀛︿範鍗曞厓锛?0 涓€?/li>
- 瀹樻柟缁冧範锛?19 閬撱€?/li>
鍏堝仛鍝簺
浼樺厛椤哄簭涓嶆槸鐪嬪悕瀛楅叿涓嶉叿锛岃€屾槸鐪嬪畠鏄惁鍚屾椂琚珷鑺傘€侀搴撱€佸畼鏂圭粌涔犲弽澶嶆帹鍒扮溂鍓嶃€?/p>
宸茬粡寮€濮嬪啓鍗★細绗?1 绔?P1 璁板繂鍗★紙鎸佺画鏇存柊锛?/a>銆?/p>
- integrity / 瀹屾暣鎬э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?195 娆°€?/li>
- confidentiality / 鏈哄瘑鎬э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?121 娆°€?/li>
- PCI DSS锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?14 娆°€?/li>
- risk assessment / 椋庨櫓璇勪及锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?53 娆°€?/li>
- availability / 鍙敤鎬э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?108 娆°€?/li>
- due diligence / 灏借亴璋冩煡锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?13 娆°€?/li>
- Defense in Depth / 绾垫繁闃插尽锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?11 娆°€?/li>
- Nonrepudiation / 涓嶅彲鍚﹁鎬э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?26 娆°€?/li>
- RTO / 鎭㈠鏃堕棿鐩爣 RTO锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?36 娆°€?/li>
- NIST锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?51 娆°€?/li>
- standard / 鏍囧噯锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?86 娆°€?/li>
- BCP / 涓氬姟杩炵画鎬ц鍒?BCP锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?55 娆°€?/li>
- RPO / 鎭㈠鐐圭洰鏍?RPO锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?26 娆°€?/li>
- CISO / 棣栧腑淇℃伅瀹夊叏瀹橈細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?25 娆°€?/li>
- ISO锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?27 娆°€?/li>
- penetration testing / 娓楅€忔祴璇曪細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?107 娆°€?/li>
- procedure / 绋嬪簭锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?15 娆°€?/li>
- threat modeling / 濞佽儊寤烘ā锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?22 娆°€?/li>
- vulnerability assessment / 婕忔礊璇勪及锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?24 娆°€?/li>
- DRP / 鐏鹃毦鎭㈠璁″垝 DRP锛歅1 鍏堝仛鎴愬畬鏁磋蹇嗗崱锛岄搴撳懡涓?33 娆°€?/li>
CH01-M001 integrity / 瀹屾暣鎬?/h3>
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歩ntegrity銆佸畬鏁存€с€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涘畼鏂圭粌涔犻 14锛涜ˉ鍏呰祫鏂?2锛涢搴撳弽鎺?195锛涘畼鏂圭粌涔?14锛涢搴撳懡涓?195銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 瀹樻柟缁冧範纰板埌 14 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 195 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 瀹屾暣鎬т笉瑕佸彧鑳屼腑鏂囧悕銆傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犲紑浜嗕竴瀹跺叕鍙革紝闈犵綉绔欐帴璁㈠崟銆傚鎴疯祫鏂欒鍒汉鎷胯蛋锛屾槸涓嶈鐪嬬殑浜虹湅鍒颁簡璧勬枡锛涜鍗曢噾棰濅粠 1000 鍏冭鏀规垚 10 鍏冿紝鏄唴瀹逛笉鍙俊浜嗭紱缃戠珯鎵撲笉寮€锛屾槸瀹㈡埛闇€瑕佷笅鍗曟椂鐢ㄤ笉浜嗭紱鍒汉鍐掑厖鍛樺伐鐧诲綍锛屾槸韬唤涓嶇湡锛涘憳宸ユ壒鍑嗚繃浠樻鍚庤涓嶆槸鑷繁鐐圭殑锛屾槸浜嬪悗闅句互杩借矗銆?姣斿锛氳祫鏂欒涓嶈鐪嬬殑浜虹湅鍒帮紝鍙満瀵嗘€у彈鎹熴€?鎵€浠ヨ€冭瘯鐪嬪埌 integr...
- 鏍囬锛氥€婅蒋浠躲€佸簲鐢ㄤ笌渚涘簲閾俱€?杩欓〉鍦ㄨ浠€涔堬細 杩欓〉鍦ㄨ锛氶闄╂槸浠庨渶姹傘€佽璁°€佷唬鐮併€佽緭鍏ャ€佹祴璇曘€侀儴缃层€佺涓夋柟缁勪欢杩樻槸渚涘簲鍟嗕氦浠樿繘鍏ョ郴缁熴€?鐜板疄閲屾€庝箞鍙戠敓锛?鍋囪鍏徃鏈夌櫥褰曟銆佹悳绱㈡銆佺暀瑷€鏉裤€佽浆璐︽寜閽€丄PI銆佺涓夋柟搴撳拰渚涘簲鍟嗕氦浠樼殑杞欢銆傜敤鎴疯緭鍏ュ彲鑳借褰撴垚鏁版嵁搴撳懡浠わ紝缃戦〉鍐呭鍙兘鍙樻垚鑴氭湰锛岀櫥褰曠姸鎬佸彲鑳借鍊熺敤锛屼緵搴斿晢缁勪欢涔熷彲鑳藉甫鏉ユ紡娲炪€?鏈夊嚑浠朵簨鍙兘鍙戠敓锛?-...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 integrity锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃畨鍏ㄧ洰鏍囷細CIA 涓庢墿灞曠洰鏍団€濆垽鏂細鍏堟妸浜嬫晠璇存垚浜鸿瘽锛氭硠闇层€佽鏀广€佹墦涓嶅紑銆佸啋鍚嶏紝杩樻槸鎶佃禆銆?鍐嶇湅鏈€鍚庝竴鍙ラ棶鐨勬槸瀹夊叏鐩爣锛岃繕鏄棶鎺у埗鎺柦銆?闂洰鏍囧氨閫夌洰鏍囧悕锛涢棶鍔炴硶鎵嶉€夊搴斿伐鍏锋垨娴佺▼銆?/li>
- 鐪嬪埌 integrity锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍐嶇湅鏈€鍚庝竴鍙ラ棶鐨勬槸瀹夊叏鐩爣锛岃繕鏄棶鎺у埗鎺柦
- 闂洰鏍囧氨閫夌洰鏍囧悕
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細瀹屾暣鎬т笉瑕佸彧鑳屼腑鏂囧悕銆傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犲紑浜嗕竴瀹跺叕鍙革紝闈犵綉绔欐帴璁㈠崟銆傚鎴疯祫鏂欒鍒汉鎷胯蛋锛屾槸涓嶈鐪嬬殑浜虹湅鍒颁簡璧勬枡锛涜鍗曢噾棰濅粠 1000 鍏冭鏀规垚 10 鍏冿紝鏄唴瀹逛笉鍙俊浜嗭紱缃戠珯鎵撲笉寮€锛屾槸瀹㈡埛闇€瑕佷笅鍗曟椂鐢ㄤ笉浜嗭紱鍒汉鍐掑厖鍛樺伐鐧诲綍锛屾槸韬唤涓嶇湡锛涘憳宸ユ壒鍑嗚繃浠樻鍚庤涓嶆槸鑷繁鐐圭殑锛屾槸浜嬪悗闅句互杩借矗銆?姣斿锛氳祫鏂?..
- 瀛︿範鍗曞厓锛氳蒋浠躲€佸簲鐢ㄤ笌渚涘簲閾?- 椋庨櫓鏄粠闇€姹傘€佽璁°€佷唬鐮併€佽緭鍏ャ€佹祴璇曘€侀儴缃层€佺涓夋柟缁勪欢杩樻槸渚涘簲鍟嗕氦浠樿繘鍏ョ郴缁熴€?/li>
- 瀹樻柟棰橈細浠ヤ笅鍝被浜哄憳閫氬父璐熻矗灞ヨ鐢遍珮绾х鐞嗗眰濮旀墭鐨勮繍钀ユ暟鎹繚鎶よ亴璐ｏ紝渚嬪楠岃瘉鏁版嵁瀹屾暣鎬с€佹祴璇曞浠藉拰绠＄悊瀹夊叏鏀跨瓥锛?/li>
- 瀹樻柟棰橈細璐濅笣鏄煇鍏珛瀛﹀尯鐨勫畨鍏ㄧ鐞嗗憳銆傚ス姝ｅ湪瀹炴柦涓€涓柊鐨勫鐢熶俊鎭郴缁燂紝骞舵鍦ㄦ祴璇曚唬鐮侊紝浠ョ‘淇濆鐢熸棤娉曟洿鏀硅嚜宸辩殑鎴愮哗銆傝礉涓濇鍦ㄦ墽琛屼俊鎭畨鍏ㄧ殑鍝」鍘熷垯锛?/li>
- 瀹樻柟棰橈細鏈€鍚庯紝鏈嶅姟鍣ㄤ笂瀛樺偍鐨勫巻鍙茶褰曞涓氬姟鏋佷负閲嶈锛岀粷涓嶈兘琚慨鏀广€備綘甯屾湜娣诲姞涓€绉嶅畬鏁存€ф帶鍒讹紝浣夸綘鑳藉瀹氭湡楠岃瘉鏂囦欢鏈淇敼銆備綘鍙互娣诲姞鍝鎺у埗锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M003 PCI DSS
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹硶寰?鍚堣銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歅CI DSS銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涘畼鏂圭粌涔犻 10锛涢搴撳弽鎺?14锛涘畼鏂圭粌涔?10锛涢搴撳懡涓?14銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 瀹樻柟缁冧範纰板埌 10 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 14 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- PCI DSS涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃淇濆瓨瀹㈡埛璧勬枡銆佸憳宸ヨ褰曘€佹敮浠樺崱淇℃伅鍜岃皟鏌ユ棩蹇椼€傛妧鏈笂鍙兘鑳藉鍑恒€佹煡鐪嬨€佸垹闄ゆ垨浜ょ粰鍒汉锛屼絾鑳藉仛鍒颁笉绛変簬鑳藉悎娉曡繖鏍峰仛銆傝鍏堢湅娉曞緥渚濇嵁銆佸鎴峰悓鎰忋€佸悎鍚岃姹傘€佹暟鎹繚鐣欐湡闄愩€佸彇璇佽姹傚拰璺ㄥ闄愬埗銆?姣斿锛氬鎴疯姹傚垹闄や釜浜鸿祫鏂欙紝瑕佺湅閫傜敤闅愮娉曞拰淇濈暀涔夊姟銆?鎵€浠ヨ€冭瘯鐪嬪埌 PCI DSS锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚?..
- 灏忔灄缁х画鍋氶锛氭敮浠樺崱鏍囧噯銆佽皝鍐欐斂绛栧苟瀹炴柦銆丆OBIT 鍘熷垯閮芥贩鍦ㄥ悓涓€椤点€?鍥犱负妗嗘灦棰樺拰瑙掕壊棰橀兘鍠滄鐢ㄩ暱瀹氫箟锛屾墍浠ヨ鎶撴渶鐗瑰埆鐨勮瘝銆?Sensitive credit card and debit card information 瀵瑰簲 PCI DSS銆傛崲鍙ヨ瘽璇达細鐪嬪埌鏀粯鍗℃暟鎹繚鎶ゆ爣鍑嗭紝灏卞厛鎯冲埌 PCI DSS銆?Functional responsibili...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 PCI DSS锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄硶寰嬨€侀殣绉佷笌鍚堣鈥濆垽鏂細棰樼洰闂硶瑙勬垨闅愮鏉冿紝鍏堢湅鏁版嵁绫诲瀷鍜屽湴鍖恒€?棰樼洰闂瘉鎹紝鍏堢湅瀹屾暣鎬с€佷繚绠￠摼鍜屾巿鏉冦€?棰樼洰闂煡璇嗕骇鏉冿紝鍏堝垎鐗堟潈銆佸晢鏍囥€佷笓鍒╁拰鍟嗕笟绉樺瘑銆?/li>
- 鐪嬪埌 PCI DSS锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄硶寰嬨€侀殣绉佷笌鍚堣鈥濆垽鏂細棰樼洰闂硶瑙勬垨闅愮鏉冿紝鍏堢湅鏁版嵁绫诲瀷鍜屽湴鍖?/li>
- 棰樼洰闂瘉鎹紝鍏堢湅瀹屾暣鎬с€佷繚绠￠摼鍜屾巿鏉?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細PCI DSS涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃淇濆瓨瀹㈡埛璧勬枡銆佸憳宸ヨ褰曘€佹敮浠樺崱淇℃伅鍜岃皟鏌ユ棩蹇椼€傛妧鏈笂鍙兘鑳藉鍑恒€佹煡鐪嬨€佸垹闄ゆ垨浜ょ粰鍒汉锛屼絾鑳藉仛鍒颁笉绛変簬鑳藉悎娉曡繖鏍峰仛銆傝鍏堢湅娉曞緥渚濇嵁銆佸鎴峰悓鎰忋€佸悎鍚岃姹傘€佹暟鎹繚鐣欐湡闄愩€佸彇璇佽姹傚拰璺ㄥ闄愬埗銆?姣斿锛氬鎴疯姹傚垹闄や釜浜鸿祫鏂欙紝瑕佺湅閫傜敤闅愮娉曞拰淇濈暀涔夊姟銆?鎵€浠?..
- 瀛︿範鍗曞厓锛氬涔犻锛氬苟璐闄┿€丳CI DSS銆佸畨鍏ㄤ笓涓氫汉鍛樺拰 COBIT - 杩欎竴娈电粌涔?PCI DSS銆佸姛鑳芥€у畨鍏ㄨ矗浠汇€丆OBIT 鍘熷垯鍜屽苟璐闄╋細鏀粯鍗＄湅 PCI DSS锛屽啓鏀跨瓥骞跺疄鏂界湅 security professional锛孋OBIT 鐪嬪埄鐩婄浉鍏宠€呫€佹暣浣撱€佸姩鎬佸拰绔埌绔不鐞嗐€?/li>
- 瀹樻柟棰橈細钂傚鐨勭粍缁囨渶杩戞敹鍒颁簡涓€浠戒綔涓烘斂搴滄壙鍖呭晢杩涜璧炲姪鐮旂┒鐨勫悎鍚屻€傜幇鍦ㄥ彲鑳介€傜敤浜庤鍚堝悓鎵€娑夊強鐨勪俊鎭郴缁熺殑鏄粈涔堟硶寰嬶紵
- 瀹樻柟棰橈細缃椾集鐗硅礋璐ｄ繚鎶ょ敤浜庡鐞嗕俊鐢ㄥ崱淇℃伅鐨勭郴缁熴€傚摢涓畨鍏ㄦ帶鍒舵鏋跺簲璇ユ寚瀵间粬鐨勮鍔紵
- 瀹樻柟棰橈細缃楁澃鐨勭粍缁囬伃閬囦簡瀹㈡埛淇＄敤鍗¤褰曟硠闇蹭簨浠躲€傛牴鎹?PCI DSS 鐨勬潯娆撅紝鍝釜缁勭粐鍙兘浼氶€夋嫨瀵规浜嬪睍寮€璋冩煡锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M004 risk assessment / 椋庨櫓璇勪及
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歳isk assessment銆侀闄╄瘎浼般€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?2锛涘畼鏂圭粌涔犻 8锛涢搴撳弽鎺?53锛涘畼鏂圭粌涔?8锛涢搴撳懡涓?53銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 2 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 瀹樻柟缁冧範纰板埌 8 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 53 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 椋庨櫓璇勪及涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 risk assessment锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄寮€浜嗕竴瀹剁綉搴楋紝缃戠珯璐熻矗鎺ヨ鍗曪紝搴撳瓨绯荤粺璐熻矗鎵ｅ簱瀛橈紝鏀粯绯荤粺璐熻矗鏀堕挶锛屽鎴疯祫鏂欒礋璐ｅ敭鍚庛€?杩欎簺绯荤粺鐪嬭捣鏉ラ兘鏄數鑴戝拰杞欢锛屾墍浠ュ皬鏋椾竴寮€濮嬩互涓猴細瀹夊叏灏辨槸 IT 鍚屼簨瑁呴槻鐏銆佷慨鐢佃剳銆佷拱宸ュ叿銆?鍚庢潵鏈変汉鍋疯蛋瀹㈡埛璧勬枡锛屽張鏈変汉灏濊瘯鐮村潖缃戠珯銆傚洜涓虹綉绔欏仠浜嗗氨娌℃湁璁㈠崟锛屽洜涓哄鎴疯祫鏂欎涪浜嗗氨鍙兘琚姇璇夈€佺綒娆俱€佷涪瀹㈡埛锛屾墍浠ヨ繖宸茬粡涓嶆槸鈥滅數鑴戝ソ涓嶅ソ鐢ㄢ€濈殑闂锛岃€屾槸鍏徃杩樿兘涓嶈兘缁х画...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 risk assessment锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control revie...
- 鐪嬪埌 risk assessment锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細椋庨櫓璇勪及涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 risk assessment锛屽厛闂畠鏄湪瑙ｅ喅鍝欢...
- 瀛︿範鍗曞厓锛氬畨鍏ㄦ槸浠€涔堬細涓轰粈涔堝畨鍏ㄦ槸涓氬姟绠＄悊闂 - IT/IS 璁╀笟鍔＄郴缁熻兘璺戯紝Security 璁╄繖浜涚郴缁熷湪琚伔鏁版嵁銆佽鐮村潖鎴栬鏀诲嚮鏃朵粛鐒跺彲闈犮€佸彈淇濇姢鍦版敮鎸佸叕鍙哥洰鏍囥€?/li>
- 瀛︿範鍗曞厓锛氫笁绫诲畨鍏ㄨ鍒掞細闀挎湡瀹氭柟鍚戯紝涓湡鎺掗」鐩紝鐭湡鍐欐楠?- 鎴樼暐璁″垝闀挎湡绋冲畾锛屽畾涔夊畨鍏ㄧ洰鐨勫苟瀵归綈缁勭粐鐩爣锛涙垬鏈鍒掓妸鎴樼暐鐩爣鎷嗘垚涓€骞村乏鍙崇殑椤圭洰銆侀绠椼€佹嫑鑱樺拰缁存姢瀹夋帓锛涜繍钀ヨ鍒掔煭鏈熻缁嗗埌璧勬簮銆佷汉鍛樸€佹椂闂磋〃鍜屾楠ゃ€?/li>
- 瀹樻柟棰橈細鍔犳枃姝ｅ湪涓虹鐞嗗眰鎾板啓涓€浠藉叧浜庝粬鏈€杩戦闄╄瘎浼扮粨鏋滅殑鎶ュ憡銆傚湪浠栫殑鎶ュ憡涓紝浠栧笇鏈涚‘瀹氶噰鐢ㄥ畨鍏ㄦ帶鍒舵帾鏂藉悗缁勭粐鍓╀綑鐨勯闄╂按骞炽€傚摢涓湳璇渶鑳芥弿杩板綋鍓嶇殑杩欑椋庨櫓姘村钩锛?/li>
- 瀹樻柟棰橈細鍦ㄥ鍏剁粍缁囪繘琛屽畾鎬ч闄╄瘎浼板悗锛岃惃鑾夊缓璁喘涔扮綉缁滃畨鍏ㄦ紡娲炰繚闄┿€傚ス寤鸿鐨勬槸鍝绫诲瀷鐨勯闄╁簲瀵硅涓猴紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M006 due diligence / 灏借亴璋冩煡
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歞ue diligence銆佸敖鑱岃皟鏌ャ€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?4锛涘畼鏂圭粌涔犻 2锛涢搴撳弽鎺?13锛涘畼鏂圭粌涔?2锛涢搴撳懡涓?13銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 4 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 瀹樻柟缁冧範纰板埌 2 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 13 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 灏借亴璋冩煡涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 due diligence锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 鎯宠薄鍏徃鍙戠敓瀹㈡埛璧勬枡娉勯湶銆傛妧鏈汉鍛樺彲鑳借礋璐ｄ慨绯荤粺銆佸叧婕忔礊銆佹煡鏃ュ織锛屼絾澶栫晫涓嶄細鍙棶鈥滃摢涓伐绋嬪笀娌′慨濂解€濄€?瀹㈡埛銆佺洃绠℃柟銆佽懀浜嬩細浼氶棶锛氬叕鍙告湁娌℃湁姝ｅ紡瀹夊叏鏀跨瓥锛熼珮绠℃湁娌℃湁鎵瑰噯锛熼闄╂湁娌℃湁鍒嗘瀽锛熷憳宸ユ湁娌℃湁鍩硅锛熸帶鍒舵湁娌℃湁娴嬭瘯杩囷紵 鎵€浠ュ師鏂囪锛歴ecurity management is a responsibility of upper management, n...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 due diligence锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓銆?闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗椼€?闂?first/best锛岄€氬父鍏堝畾鑼冨洿銆佽矗浠汇€佺鐞嗘敮鎸佹垨椋庨櫓璇勪及锛屽啀閫夊伐鍏枫€?/li>
- 鐪嬪埌 due diligence锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓
- 闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細灏借亴璋冩煡涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 due diligence锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€...
- 瀛︿範鍗曞厓锛氬畨鍏ㄨ鑹蹭笌楂樼璐ｄ换锛氭渶缁堣矗浠诲湪绠＄悊灞傦紝涓嶅湪 IT 鍛樺伐 - 瀹夊叏绠＄悊鏄笟鍔¤繍钀ヨ矗浠伙紱InfoSec 鍥㈤槦搴斾繚鎸佷竴瀹氱嫭绔嬫€э紝鐢?CISO 鍚戦珮灞傛眹鎶ワ紱楂樼鎵瑰噯鍜屾壙璇烘斂绛栵紝鎵嶈兘浣撶幇 due diligence 鍜?due care銆?/li>
- 瀛︿範鍗曞厓锛欼TIL銆丼WIFT 涓?due diligence/due care 寮曞叆 - ITIL 鐢ㄦ渶浣冲疄璺典紭鍖?IT 鏈嶅姟骞跺榻愪笟鍔★紱SWIFT 淇濇姢閲戣瀺娑堟伅鍜屼氦鏄擄紱due diligence 鏄厛寤虹珛璁″垝鏀跨瓥娴佺▼锛宒ue care 鏄寔缁墽琛岃繖浜涙椿鍔ㄣ€?/li>
- 瀛︿範鍗曞厓锛歞ue diligence銆乨ue care 涓庡畨鍏ㄦ斂绛栧紑澶?- due diligence 涔熺敤浜庣洃鐫ｅ拰鐣欎笅璁板綍锛沝ue care 鏄寜璁″垝鍋氭纭姩浣滐紱瀹夊叏鏀跨瓥瀹氫箟淇濇姢鑼冨洿銆佽祫浜с€佽矗浠汇€佸璁°€佹墽琛屻€佸悎瑙勫拰鍙帴鍙楅闄┿€?/li>
- 瀛︿範鍗曞厓锛氬涔犻锛欳OBIT銆乨ue diligence/due care 鍜屾枃妗ｅ尮閰?- 杩欎竴娈电粌涔?COBIT 鍘熷垯銆乨ue diligence/due care 鐨勫尯鍒紝浠ュ強 policy銆乻tandard銆乸rocedure銆乬uideline 鍥涚被鏂囨。瀹氫箟銆?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M007 Defense in Depth / 绾垫繁闃插尽
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欴efense in Depth銆佺旱娣遍槻寰°€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?3锛涘畼鏂圭粌涔犻 4锛涢搴撳弽鎺?11锛涘畼鏂圭粌涔?4锛涢搴撳懡涓?11銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 3 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 瀹樻柟缁冧範纰板埌 4 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 11 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 绾垫繁闃插尽涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 Defense in Depth锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 鏍囬锛氥€婃硶寰嬨€侀殣绉佷笌鍚堣銆?杩欓〉鍦ㄨ浠€涔堬細 杩欓〉鍦ㄨ锛氬叕鍙稿仛瀹夊叏鍔ㄤ綔鏃讹紝娉曞緥銆佸悎鍚屻€侀殣绉佸拰璇佹嵁杈圭晫鍦ㄥ摢閲屻€?鐜板疄閲屾€庝箞鍙戠敓锛?鍋囪鍏徃淇濆瓨瀹㈡埛璧勬枡銆佸憳宸ヨ褰曘€佹敮浠樺崱淇℃伅鍜岃皟鏌ユ棩蹇椼€傛妧鏈笂鍙兘鑳藉鍑恒€佹煡鐪嬨€佸垹闄ゆ垨浜ょ粰鍒汉锛屼絾鑳藉仛鍒颁笉绛変簬鑳藉悎娉曡繖鏍峰仛銆傝鍏堢湅娉曞緥渚濇嵁銆佸鎴峰悓鎰忋€佸悎鍚岃姹傘€佹暟鎹繚鐣欐湡闄愩€佸彇璇佽姹傚拰璺ㄥ闄愬埗銆?鏈夊嚑浠朵簨鍙兘鍙戠敓锛?- 瀹㈡埛瑕佹眰鍒犻櫎涓?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Defense in Depth锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control revi...
- 鐪嬪埌 Defense in Depth锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細绾垫繁闃插尽涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 Defense in Depth锛屽厛闂畠鏄湪瑙ｅ喅鍝?..
- 瀛︿範鍗曞厓锛氭硶寰嬨€侀殣绉佷笌鍚堣 - 鍏徃鍋氬畨鍏ㄥ姩浣滄椂锛屾硶寰嬨€佸悎鍚屻€侀殣绉佸拰璇佹嵁杈圭晫鍦ㄥ摢閲屻€?/li>
- 瀛︿範鍗曞厓锛欴efense in Depth 缁細涓茶灞傛銆佸箍搴﹂槻寰′笌鎶借薄 - 瀹夊叏鍒嗗眰瑕佽鏀诲嚮渚濇缁忚繃澶氶亾鎺у埗锛涘苟琛屾帶鍒跺浣嗘祬锛涘鍘傚晢鍜屼笉鍚屼骇鍝佸彲鍑忓皯鍚屼竴婕忔礊鍚屾椂鎵撶┛澶氬眰锛涙娊璞℃妸鐩镐技瀵硅薄銆佽鑹叉垨鏉冮檺鍒嗙粍绠＄悊銆?/li>
- 瀛︿範鍗曞厓锛氬涔犻锛氬垎瑙ｇ粍浠朵笌 defense in depth 鐩稿叧鏈 - 杩欎竴娈电粌涔?reduction analysis 鐨勫叧閿粍浠讹紝浠ュ強 defense in depth 鐩稿叧鏈锛歭ayering銆亃ones銆乺ealms銆乧ompartments銆乻egmentations銆乴attice struct...
- 瀹樻柟棰橈細鍝」淇℃伅瀹夊叏鍘熷垯鎸囧嚭锛岀粍缁囧簲灏藉彲鑳藉疄鏂介噸鍙犵殑瀹夊叏鎺у埗鎺柦锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M009 RTO / 鎭㈠鏃堕棿鐩爣 RTO
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬叕寮?鏁板€笺€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歊TO銆佹仮澶嶆椂闂寸洰鏍?RTO銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 2锛涢搴撳弽鎺?36锛涘畼鏂圭粌涔?2锛涢搴撳懡涓?36銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 2 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 36 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 瀹冨甫鍏紡銆佹寚鏍囨垨鏁板瓧锛屼笉鑳藉彧鍑劅瑙夎儗銆?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎭㈠鏃堕棿鐩爣 RTO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 RTO锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 RTO锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA銆?闂笟鍔℃€庝箞鎾戜綇鐪?BCP銆?闂妧鏈€庝箞鎭㈠鐪?DRP銆?闂椂闂寸湅 RTO锛岄棶鏁版嵁涓㈠け鐪?RPO銆?/li>
- 鐪嬪埌 RTO锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA
- 闂笟鍔℃€庝箞鎾戜綇鐪?BCP
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎭㈠鏃堕棿鐩爣 RTO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 RTO锛屽厛闂畠鏄湪瑙?..
- 瀹樻柟棰橈細浠ヤ笅鍝」鍗忚閫氬父瑕佹眰渚涘簲鍟嗕笉寰楁姭闇插湪鍙備笌椤圭洰杩囩▼涓幏鎮夌殑鏈哄瘑淇℃伅锛?/li>
- 瀹樻柟棰橈細C. 淇濆瘑鍗忚锛圢DA锛夐€氬父瑕佹眰鍦ㄤ笟鍔″叧绯讳腑杩涜鍗曞悜鎴栧弻鍚戜繚瀵嗐€傛湇鍔＄骇鍒崗璁瀹氭湇鍔℃甯歌繍琛屾椂闂村拰鍏朵粬鎬ц兘鎸囨爣銆傜珵涓氱姝㈠崗璁紙NCA锛夐檺鍒跺憳宸ユ湭鏉ョ殑灏变笟鍙兘鎬с€傛仮澶嶆椂闂寸洰鏍囷紙RTO锛夌敤浜庝笟鍔¤繛缁€ц鍒掋€?/li>
- 棰樺簱锛歐hich of the following steps should be performed first in a business impact analysis (BIA)?涓嬪垪鍝竴姝ワ紝鏄墽琛屼笟鍔″奖鍝嶅垎鏋愮殑绗竴姝ワ紵
- 棰樺簱锛歐hat is the Maximum Tolerable Downtime (MTD)? 浠€涔堟槸鍙壙鍙楃殑鏈€闀垮仠鏈烘椂闂?MTD)
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M010 NIST
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹硶寰?鍚堣銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歂IST銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涘畼鏂圭粌涔犻 3锛涢搴撳弽鎺?51锛涘畼鏂圭粌涔?3锛涢搴撳懡涓?51銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 瀹樻柟缁冧範纰板埌 3 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 51 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- NIST涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 NIST锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鐨勫叕鍙告兂寤鸿瀹夊叏绠＄悊浣撶郴锛屼絾涓嶆兂鑷繁浠庨浂鍙戞槑鎵€鏈夎姹傘€?鍥犱负寰堝琛屼笟宸茬粡鎶婃垚鐔熷仛娉曞啓鎴愭爣鍑嗭紝鎵€浠ュ叕鍙稿彲浠ュ弬鑰?ISO銆両SO/IEC 27000 鍜?NIST銆?ISO 鏄?worldwide standards-setting group銆傛崲鍙ヨ瘽璇达細瀹冧笉鏄彧绠″畨鍏紝鑰屾槸鍙戝竷宸ヤ笟銆佸晢涓氥€佽蒋浠躲€佸崗璁拰绠＄悊绛夊绫绘爣鍑嗐€?ISO/IEC 27000 fami...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 NIST锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊銆?鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋勩€?鐪嬪埌 PCI DSS 鎯虫敮浠樺崱銆?鐪嬪埌 FedRAMP 鎯宠仈閭︿簯銆?鐪嬪埌 ISO/NIST/ITIL 鍒嗗埆鐪嬬鐞嗕綋绯汇€佹寚鍗楀拰鏈嶅姟绠＄悊銆?/li>
- 鐪嬪埌 NIST锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊
- 鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細NIST涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 NIST锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛欼SO銆両SO/IEC 27000 涓?NIST锛氬畨鍏ㄦ鏋朵粠鍝噷鏉?- ISO 鎻愪緵鍥介檯鏍囧噯锛汭SO/IEC 27000 鍙綔涓虹粍缁囧畨鍏ㄧ鐞嗗熀纭€锛汵IST 鏄編鍥芥爣鍑嗘満鏋勶紝SP 800-53銆丷MF 鍜?CSF 甯哥敤浜庡畨鍏ㄦ帶鍒跺拰椋庨櫓绠＄悊銆?/li>
- 瀹樻柟棰橈細浠ヤ笅鍥捐〃鏄剧ず浜嗙編鍥藉浗瀹舵爣鍑嗕笌鎶€鏈爺绌堕櫌锛圢IST锛夐闄╃鐞嗘鏋讹紝鍏朵腑缂哄皯涓€涓楠ゃ€傜己灏戠殑姝ラ鏄粈涔堬紵
- 瀹樻柟棰橈細A. 棣栧厛蹇呴』鎰忚瘑鍒帮紝鍟嗘爣鏄繚鎶ゅ窘鏍囩殑姝ｇ‘鐭ヨ瘑浜ф潈淇濇姢鏈哄埗銆傚洜姝わ紝鍚夊搴旇仈绯荤編鍥戒笓鍒╁晢鏍囧眬锛圲SPTO锛夛紝璇ュ眬璐熻矗鍟嗘爣娉ㄥ唽銆傚浗浼氬浘涔﹂鐗堟潈灞€绠＄悊鐗堟潈椤圭洰銆傚浗瀹跺畨鍏ㄥ眬锛圢SA锛夊拰缇庡浗鍥藉鏍囧噯涓庢妧鏈爺绌堕櫌锛圢IST锛夊湪鐭ヨ瘑浜ф潈淇濇姢涓病鏈変綔鐢ㄣ€?/li>
- 瀹樻柟棰橈細A. 缇庡浗鍥藉鏍囧噯涓庢妧鏈爺绌堕櫌锛圢IST锛夐闄╃鐞嗘鏋朵腑缂哄け鐨勬楠ゆ槸璇勪及瀹夊叏鎺у埗銆傝繖鏄祦绋嬬殑閲嶈缁勬垚閮ㄥ垎銆傜粍缁囧凡缁忓噯澶囥€佸绯荤粺杩涜鍒嗙被銆侀€夋嫨閫傚綋鐨勬帶鍒跺苟瀹炴柦杩欎簺鎺у埗銆傚湪鎺堟潈绯荤粺浣跨敤涔嬪墠锛屽繀椤昏瘎浼拌繖浜涙帶鍒剁殑鏈夋晥鎬э紝纭繚瀹冧滑婊¤冻瀹夊叏瑕佹眰銆?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M011 standard / 鏍囧噯
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歴tandard銆佹爣鍑嗐€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?2锛涢搴撳弽鎺?86锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?86銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 2 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 86 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鏍囧噯涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 standard锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍏徃鏃㈣璁捐浼佷笟瀹夊叏鏋舵瀯锛屼篃瑕佸鐞嗗鎴峰埛鍗′粯娆俱€?鍥犱负浼佷笟鏋舵瀯瑕佹湇鍔′笟鍔￠闄╋紝鑰屾敮浠樺崱鏁版嵁鏈夎涓氬己鍒惰姹傦紝鎵€浠?SABSA 鍜?PCI DSS 瑙ｅ喅鐨勬槸涓嶅悓闂銆?SABSA risk-focused锛屽己璋冨湪 business context 涓瘑鍒拰绠＄悊瀹夊叏椋庨櫓銆傛崲鍙ヨ瘽璇达細瀹夊叏鎺柦瑕佸拰缁勭粐鍏蜂綋椋庨櫓鍜岀洰鏍囧榻愩€?SABSA 杩?business-dri...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 standard锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓銆?闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗椼€?闂?first/best锛岄€氬父鍏堝畾鑼冨洿銆佽矗浠汇€佺鐞嗘敮鎸佹垨椋庨櫓璇勪及锛屽啀閫夊伐鍏枫€?/li>
- 鐪嬪埌 standard锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓
- 闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鏍囧噯涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 standard锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛歋ABSA 涓?PCI DSS锛氫笟鍔￠┍鍔ㄦ灦鏋勫拰鏀粯鍗′繚鎶?- SABSA 浠庝笟鍔￠闄╁嚭鍙戝仛鍒嗗眰瀹夊叏鏋舵瀯锛汸CI DSS 鏄繚鎶や俊鐢ㄥ崱鍜屽€熻鍗℃暟鎹殑瀹夊叏鏍囧噯锛岃鐩栨寔鍗′汉鏁版嵁銆佺綉缁滃畨鍏ㄣ€佸姞瀵嗗拰璁块棶鎺у埗銆?/li>
- 瀛︿範鍗曞厓锛氬垎瑙ｇ郴缁燂細淇′换杈圭晫銆佹暟鎹祦銆佽緭鍏ョ偣銆佺壒鏉冩搷浣滃拰瀹夊叏鍋囪 - decomposition 鎶婄郴缁熸媶灏忥紝璇嗗埆淇′换杈圭晫銆佹暟鎹祦銆佽緭鍏ョ偣銆佺壒鏉冩搷浣滃拰瀹夊叏鍋囪锛涘▉鑳佽璁板綍鎵嬫銆佺洰鏍囥€佸悗鏋滃拰瀵圭瓥锛屽啀杩涘叆鎺掑簭銆?/li>
- 棰樺簱锛欶or an application security program to be effective within an organization, it is critical to瀵逛簬搴旂敤绋嬪簭瀹夊叏璁″垝鍦ㄧ粍缁囧唴鏄湁鏁堢殑锛屾渶鍏抽敭鐨勬槸锛?/li>
- 棰樺簱锛歐hat is the length of an MD5 message digest? 淇℃伅MD5鐨勯暱搴︽槸锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M012 BCP / 涓氬姟杩炵画鎬ц鍒?BCP
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬叕寮?鏁板€笺€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欱CP銆佷笟鍔¤繛缁€ц鍒?BCP銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 1锛涢搴撳弽鎺?55锛涘畼鏂圭粌涔?1锛涢搴撳懡涓?55銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 1 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 55 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 瀹冨甫鍏紡銆佹寚鏍囨垨鏁板瓧锛屼笉鑳藉彧鍑劅瑙夎儗銆?/li>
灏忕櫧鍏堢湅锛?/p>
- 涓氬姟杩炵画鎬ц鍒?BCP涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 BCP锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 BCP锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA銆?闂笟鍔℃€庝箞鎾戜綇鐪?BCP銆?闂妧鏈€庝箞鎭㈠鐪?DRP銆?闂椂闂寸湅 RTO锛岄棶鏁版嵁涓㈠け鐪?RPO銆?/li>
- 鐪嬪埌 BCP锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA
- 闂笟鍔℃€庝箞鎾戜綇鐪?BCP
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細涓氬姟杩炵画鎬ц鍒?BCP涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 BCP锛屽厛闂畠鏄湪...
- 瀹樻柟棰橈細浠ヤ笅鍝」琛屽姩閫氬父涓嶅睘浜庝笟鍔¤繛缁€ц鍒掔殑椤圭洰鑼冨洿鍜岃鍒掗樁娈碉紵
- 棰樺簱锛歐hich of the following rules pertaining to a Business Continuity Plan/Disaster Recovery Plan is incorrect?鍏充簬涓氬姟杩炵画鎬ц鍒?鐏鹃毦鎭㈠璁″垝锛屼笅鍒楀摢椤硅鍒欐槸涓嶆纭殑锛?/li>
- 棰樺簱锛歐hich one of the following is NOT one of the outcomes of a vulnerability assessment?浠ヤ笅鍝」涓嶆槸婕忔礊璇勪及鐨勭粨鏋滐紵
- 棰樺簱锛歐hich of the following statements BEST describes the extent to which an organization should address business continuity or disaster recovery planning...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M013 RPO / 鎭㈠鐐圭洰鏍?RPO
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬叕寮?鏁板€笺€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歊PO銆佹仮澶嶇偣鐩爣 RPO銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 1锛涢搴撳弽鎺?26锛涘畼鏂圭粌涔?1锛涢搴撳懡涓?26銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 1 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 26 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 瀹冨甫鍏紡銆佹寚鏍囨垨鏁板瓧锛屼笉鑳藉彧鍑劅瑙夎儗銆?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎭㈠鐐圭洰鏍?RPO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 RPO锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 RPO锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA銆?闂笟鍔℃€庝箞鎾戜綇鐪?BCP銆?闂妧鏈€庝箞鎭㈠鐪?DRP銆?闂椂闂寸湅 RTO锛岄棶鏁版嵁涓㈠け鐪?RPO銆?/li>
- 鐪嬪埌 RPO锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA
- 闂笟鍔℃€庝箞鎾戜綇鐪?BCP
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎭㈠鐐圭洰鏍?RPO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 RPO锛屽厛闂畠鏄湪瑙ｅ喅...
- 瀹樻柟棰橈細D. 瀹夎闃绘鏀诲嚮鐨勮澶囷紝鏄瘯鍥鹃€氳繃闄嶄綆搴旂敤绋嬪簭鏀诲嚮鎴愬姛鐨勫彲鑳芥€ф潵闄嶄綆椋庨櫓銆傛坊鍔犻槻鐏涓嶄細瑙ｅ喅椋庨櫓褰卞搷銆佹仮澶嶇偣鐩爣锛圧PO锛夋垨鏈€澶у彲瀹瑰繊涓柇鏃堕棿锛圡TO锛夈€?/li>
- 棰樺簱锛歐hat is the Maximum Tolerable Downtime (MTD)? 浠€涔堟槸鍙壙鍙楃殑鏈€闀垮仠鏈烘椂闂?MTD)
- 棰樺簱锛歐hich objective defines the most recent point in time to which data must be recovered or synchronized without unacceptable business impact? 鍝釜鐩爣琛ㄧず锛氭暟鎹?..
- 棰樺簱锛歐hen designing a business continuity plan (BCP), what is the formula to determine the Maximum Tolerable Downtime (MTD)?鍦ㄨ璁′笟鍔¤繛缁€ц鍒?BCP)鏃讹紝纭畾鏈€澶у璁稿仠鏈烘椂闂?MT...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欼SO銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 2锛涢搴撳弽鎺?27锛涘畼鏂圭粌涔?2锛涢搴撳懡涓?27銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 2 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 27 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- ISO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 ISO锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 ISO锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 ISO锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鐪嬪埌 COBIT 鎯?IT 娌荤悊銆?鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋勩€?鐪嬪埌 PCI DSS 鎯虫敮浠樺崱銆?鐪嬪埌 FedRAMP 鎯宠仈閭︿簯銆?鐪嬪埌 ISO/NIST/ITIL 鍒嗗埆鐪嬬鐞嗕綋绯汇€佹寚鍗楀拰鏈嶅姟绠＄悊銆?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細ISO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 ISO锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀹樻柟棰橈細鏈鍦ㄥ鎵句竴涓湪鍏ㄧ悆鑼冨洿鍐呰骞挎硾鎺ュ彈涓斾笓闂ㄥ叧娉ㄤ俊鎭畨鍏ㄦ帶鍒剁殑鎺у埗鐩爣妗嗘灦銆備互涓嬪摢涓鏋舵渶鑳芥弧瓒充粬鐨勯渶姹傦紵
- 瀹樻柟棰橈細B. ISO 27002 鏄竴椤瑰浗闄呮爣鍑嗭紝涓撻棬鑱氱劍浜庝俊鎭畨鍏紝鏍囬涓?鈥滀俊鎭畨鍏ㄣ€佺綉缁滃畨鍏ㄥ拰闅愮淇濇姢锛氫俊鎭畨鍏ㄦ帶鍒垛€濄€侷TIL 纭疄鍖呭惈瀹夊叏绠＄悊瀹炶返锛屼絾瀹冨苟闈炴枃妗ｇ殑鍞竴閲嶇偣锛屼笖 ITIL 鐨勫畨鍏ㄩ儴鍒嗘簮鑷?ISO 27002銆傝兘鍔涙垚鐔熷害妯″瀷锛圕MM锛夎仛鐒︿簬杞欢寮€鍙戯紝銆婇」鐩鐞嗙煡璇嗕綋绯绘寚鍗椼€嬶紙PMBO...
- 棰樺簱锛欵ncryption is applicable to all of the following OSI/ISO layers except: 鍔犲瘑閫傜敤浜庝互涓嬫墍鏈塐SI/ISO灞傦紝闄や簡锛?/li>
- 棰樺簱锛歍he ISO/IEC 27001:2013 is a standard for: ISO/IEC 27001:2013鐗堟槸浠€涔堟爣鍑嗭紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歱rocedure銆佺▼搴忋€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?15锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?15銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 15 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 绋嬪簭涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 procedure锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄瑕侀儴缃蹭竴鍙版湇鍔″櫒銆傛斂绛栬瑕佸畨鍏紝鏍囧噯璇村繀椤荤粺涓€閰嶇疆锛屽熀绾胯鏈€浣庤姹傦紝浣嗗伐绋嬪笀杩橀渶瑕佷竴姝ヤ竴姝ユ€庝箞鍋氥€?鍥犱负鎵ц鏃朵笉鑳介潬鐚滐紝鎵€浠?procedure 鎴?SOP 瑕佸啓 exact actions銆?Procedure 鏄?detailed, step-by-step how-to document銆傛崲鍙ヨ瘽璇达細瀹冨憡璇変綘瀹炴柦鏌愪釜鏈哄埗銆佹帶鍒舵垨鏂规鏃舵瘡涓€姝ユ€庝箞鍋氥€?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 procedure锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓銆?闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗椼€?闂?first/best锛岄€氬父鍏堝畾鑼冨洿銆佽矗浠汇€佺鐞嗘敮鎸佹垨椋庨櫓璇勪及锛屽啀閫夊伐鍏枫€?/li>
- 鐪嬪埌 procedure锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓
- 闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細绋嬪簭涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 procedure锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氱▼搴忋€佹枃妗ｅ垎绂讳笌濞佽儊寤烘ā寮曞叆 - 绋嬪簭鏄竴姝ヤ竴姝ョ殑鎿嶄綔鏂囨。锛涙枃妗ｅ垎灞備究浜庢寜闇€鍒嗗彂鍜屽眬閮ㄦ洿鏂帮紱濞佽儊寤烘ā鐢ㄦ潵璇嗗埆銆佸垎绫诲拰鍒嗘瀽娼滃湪濞佽儊銆?/li>
- 棰樺簱锛欰 backup of all files that are new or modified since the last full backup is鑷粠鏈€鍚庝竴娆″畬鍏ㄥ浠戒互鍚庯紝澶囦唤鎵€鏈夋柊鐨勬垨琚慨鏀硅繃鐨勬枃浠舵槸
- 棰樺簱锛歐hich of the choices below is NOT an OSI reference model Session Layer protocol, standard, or interface? 浠ヤ笅鍝竴閫夐」涓嶆槸OSI鍙傝€冩ā鍨嬩細璇濆眰鍗忚锛屾爣鍑嗘垨鎺ュ彛锛?/li>
- 棰樺簱锛歐hich integrity model defines a constrained data item, an integrity verification procedure and a transformation procedure?鍝瀹屾暣鎬фā鍨嬪畾涔夊彈绾︽潫鐨勬暟鎹」銆佸畬鏁存€ч獙璇佺▼搴忓拰杞崲...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M018 threat modeling / 濞佽儊寤烘ā
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歵hreat modeling銆佸▉鑳佸缓妯°€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?2锛涘畼鏂圭粌涔犻 1锛涢搴撳弽鎺?22锛涘畼鏂圭粌涔?1锛涢搴撳懡涓?22銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 2 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 瀹樻柟缁冧範纰板埌 1 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 22 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 濞佽儊寤烘ā涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 threat modeling锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍥㈤槦瑕佸紑鍙戞柊绯荤粺銆傛湁浜鸿鍏堜笂绾匡紝鍑轰簡闂鍐嶈ˉ涓侊紱瀹夊叏浜哄憳璇磋璁￠樁娈靛氨瑕佹兂濞佽儊銆?鍥犱负涓婄嚎鍚庤ˉ瀹夊叏甯稿父瑕侀噸鍐欎唬鐮併€佸奖鍝嶅姛鑳藉拰鐢ㄦ埛浣撻獙锛屾墍浠ヨ秺鏃╁缓妯¤秺鍒掔畻銆?Threat modeling 涓嶆槸 single event銆傛崲鍙ヨ瘽璇达細瀹冧粠璁捐鏃╂湡鍚姩锛屽苟鍦ㄧ郴缁?life cycle 涓寔缁繘琛屻€?Microsoft SDL 鏄緥瀛愶紝瀹冪敤涓€绯诲垪绋嬪簭鎻愬崌 sec...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 threat modeling锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control revie...
- 鐪嬪埌 threat modeling锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細濞佽儊寤烘ā涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 threat modeling锛屽厛闂畠鏄湪瑙ｅ喅鍝欢...
- 瀛︿範鍗曞厓锛氬▉鑳佸缓妯′笉鏄竴娆′簨浠讹細鏃╂湡璁捐涓殑涓诲姩闃插尽 - 濞佽儊寤烘ā瑕佷粠璁捐鏃╂湡寮€濮嬪苟璐┛鐢熷懡鍛ㄦ湡锛汼DL 甯紑鍙戣€呭噺灏戞紡娲烇紱鎶婂畨鍏ㄥ唴寤鸿繘璁捐閫氬父姣斾笂绾垮悗纭琛ヤ竵鏇翠究瀹溿€佹洿鏈夋晥銆?/li>
- 瀛︿範鍗曞厓锛氭敾鍑诲浘涓?reduction analysis锛氬厛鐢绘暟鎹祦锛屽啀鎷嗙郴缁?- 濞佽儊寤烘ā浼氱敾鍑虹粍浠躲€佸畨鍏ㄥ尯杈圭晫鍜屾暟鎹祦锛涘啀瀵圭郴缁熷仛 reduction analysis锛屼篃鍙?decomposition锛岀悊瑙ｅ唴閮ㄧ粍浠跺拰澶栭儴浜や簰銆?/li>
- 瀹樻柟棰橈細鑹句鸡姝ｅ湪杩涜濞佽儊寤烘ā锛屽苟鍐冲畾灏嗙郴缁熷垎瑙ｄ负濡傚浘鎵€绀虹殑鏍稿績鍏冪礌浼氬緢鏈夊府鍔┿€備粬浣跨敤鐨勬槸浠€涔堝伐鍏凤紵
- 棰樺簱锛歍he major benefit of information classification is to淇℃伅鍒嗙被鐨勪富瑕佸ソ澶?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M019 vulnerability assessment / 婕忔礊璇勪及
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歷ulnerability assessment銆佹紡娲炶瘎浼般€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 1锛涜ˉ鍏呰祫鏂?2锛涢搴撳弽鎺?24锛涘畼鏂圭粌涔?1锛涢搴撳懡涓?24銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 1 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 24 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 婕忔礊璇勪及涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 vulnerability assessment锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 vulnerability assessment锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/cont...
- 鐪嬪埌 vulnerability assessment锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細婕忔礊璇勪及涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 vulnerability assessment锛?..
- 瀹樻柟棰橈細鑹句鸡姝ｅ湪杩涜濞佽儊寤烘ā锛屽苟鍐冲畾灏嗙郴缁熷垎瑙ｄ负濡傚浘鎵€绀虹殑鏍稿績鍏冪礌浼氬緢鏈夊府鍔┿€備粬浣跨敤鐨勬槸浠€涔堝伐鍏凤紵
- 琛ュ厖璧勬枡锛?.1 瀹夊叏101 - CISSP 瀹樻柟瀛︿範鎵嬪唽锛堢 9 鐗堬級 1.1 瀹夊叏 101 瀹夊叏鐨勯噸瑕佹€х粡甯歌鎻愬強锛屼絾鎴戜滑骞堕潪鎬昏兘鐞嗚В鍏朵腑鐨勭紭鐢便€傚畨鍏ㄥ緢閲嶈锛屾槸鍥犱负褰撴湁 浜鸿瘯鍥剧獌鍙栫粍缁囩殑鏁版嵁鎴栫牬鍧忓叾鐗╃悊鎴栭€昏緫鍏冪礌鏃讹紝瀹冩湁鍔╁崈纭繚缁勭粐缁х画瀛樺湪涓庤繍钀ャ€傚畨 鍏ㄥ簲琚涓轰笟鍔＄鐞嗙殑涓€涓绱狅紝鑰屼笉浠?..
- 琛ュ厖璧勬枡锛?.2 鐞嗚В鍜屽簲鐢ㄥ畨鍏ㄦ蹇?- CISSP 瀹樻柟瀛︿範鎵嬪唽锛堢 9 鐗堬級 1.1 瀹夊叏 101 瀹夊叏鐨勯噸瑕佹€х粡甯歌鎻愬強锛屼絾鎴戜滑骞堕潪鎬昏兘鐞嗚В鍏朵腑鐨勭紭鐢便€傚畨鍏ㄥ緢閲嶈锛屾槸鍥犱负褰撴湁 浜鸿瘯鍥剧獌鍙栫粍缁囩殑鏁版嵁鎴栫牬鍧忓叾鐗╃悊鎴栭€昏緫鍏冪礌鏃讹紝瀹冩湁鍔╁崈纭繚缁勭粐缁х画瀛樺湪涓庤繍钀ャ€傚畨 鍏ㄥ簲琚涓轰笟鍔＄鐞嗙殑涓€涓绱狅紝鑰屼笉浠?..
- 棰樺簱锛歐hich choice below most accurately reflects the goals of risk mitigation? 浠ヤ笅鍝竴閫夐」鏈€鍑嗙‘鍦板弽鏄犱簡椋庨櫓缂撹В鐨勭洰鏍囷紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M020 DRP / 鐏鹃毦鎭㈠璁″垝 DRP
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬叕寮?鏁板€笺€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欴RP銆佺伨闅炬仮澶嶈鍒?DRP銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?33锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?33銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 33 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 瀹冨甫鍏紡銆佹寚鏍囨垨鏁板瓧锛屼笉鑳藉彧鍑劅瑙夎儗銆?/li>
灏忕櫧鍏堢湅锛?/p>
- 鐏鹃毦鎭㈠璁″垝 DRP涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 DRP锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 DRP锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA銆?闂笟鍔℃€庝箞鎾戜綇鐪?BCP銆?闂妧鏈€庝箞鎭㈠鐪?DRP銆?闂椂闂寸湅 RTO锛岄棶鏁版嵁涓㈠け鐪?RPO銆?/li>
- 鐪嬪埌 DRP锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滀笟鍔¤繛缁€т笌鐏鹃毦鎭㈠鈥濆垽鏂細闂?first/priority 甯稿厛鐪?BIA
- 闂笟鍔℃€庝箞鎾戜綇鐪?BCP
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鐏鹃毦鎭㈠璁″垝 DRP涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪涓绘満鎴挎柇鐢碉紝缃戠珯鎵撲笉寮€锛屽鏈嶇郴缁熶篃涓嶈兘鐢ㄣ€備笟鍔￠儴闂ㄧ湅鍒板鎴蜂笉鑳戒笅鍗曘€佸鏈嶆帴涓嶄簡鐢佃瘽銆佽鍗曟病浜哄鐞嗐€佹敹娆惧涓嶄笂锛涙妧鏈汉鍛樼湅鍒版湇鍔″櫒銆佹暟鎹簱銆佺綉缁滃拰璐﹀彿閮借鎭㈠銆?姣斿锛欱IA 姣旇緝鍝」涓氬姟鍋滀簡鏈€鐥涳紝鍐冲畾浼樺厛绾с€?鎵€浠ヨ€冭瘯鐪嬪埌 DRP锛屽厛闂畠鏄湪瑙?..
- 棰樺簱锛歐hich type of disaster recovery plan (DRP) testing carries the MOST operational risk?鍝绫诲瀷鐨勭伨闅炬仮澶嶈鍒?DRP)娴嬭瘯甯︽潵鐨勮繍钀ラ闄╂渶澶э紵
- 棰樺簱锛欰n organization's retail website provides its only source of revenue, so the disaster recovery plan (DRP) must document an estimated time for each st...
- 棰樺簱锛歐hich of the following events prompts a review of the disaster recovery plan (DRP)?浠ヤ笅鍝竴涓簨浠朵績浣垮鐏鹃毦鎭㈠璁″垝(DRP)杩涜瀹℃煡锛?/li>
- 棰樺簱锛歐hat is the FIRST step prior to executing a test of an organisation's disaster recovery (DR) or business continuity plan (BCP)?鍦ㄥ涓€涓粍缁囩殑鐏鹃毦鎭㈠(DR)鎴栦笟鍔¤繛缁€ц...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M022 STRIDE
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歋TRIDE銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 3锛涢搴撳弽鎺?10锛涘畼鏂圭粌涔?3锛涢搴撳懡涓?10銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 3 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 10 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- STRIDE涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 STRIDE锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 STRIDE锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 STRIDE锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 闂瘉鏄庤韩浠界湅璁よ瘉銆?闂兘璁块棶浠€涔堢湅鎺堟潈銆?闂潈闄愭ā鍨嬬湅 RBAC銆丄BAC銆丏AC銆丮AC銆?闂簨鍚庤拷璐ｇ湅鏃ュ織銆佸璁″拰璁拌处銆?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細STRIDE涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 STRIDE锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀹樻柟棰橈細鍗氭瘮姝ｅ湪璋冩煡涓€璧峰畨鍏ㄤ簨浠讹紝鍙戠幇鏀诲嚮鑰呬粠涓€涓櫘閫氱敤鎴疯处鎴峰紑濮嬶紝浣嗚娉曞埄鐢ㄧ郴缁熸紡娲炰负璇ヨ处鎴疯幏鍙栦簡绠＄悊鍛樻潈闄愩€傚湪 STRIDE 濞佽儊妯″瀷涓嬶紝杩欏睘浜庡摢绉嶇被鍨嬬殑鏀诲嚮锛?/li>
- 瀹樻柟棰橈細鍔犻噷姝ｅ湪鍒嗘瀽涓€璧峰畨鍏ㄤ簨浠讹紝鍦ㄨ皟鏌ヨ繃绋嬩腑锛屼粬閬囧埌涓€鍚嶇敤鎴峰惁璁ゆ墽琛岃繃浠栬涓鸿鐢ㄦ埛鎵ц杩囩殑鎿嶄綔銆傚湪 STRIDE 妯″瀷涓嬶紝杩欏睘浜庡摢绉嶇被鍨嬬殑濞佽儊锛?/li>
- 瀹樻柟棰橈細绾︾堪姝ｅ湪鍒嗘瀽閽堝鍏跺叕鍙哥殑涓€娆℃敾鍑伙紝鏀诲嚮鑰呴€氳繃 HTML 浠ｇ爜涓祵鍏ョ殑娉ㄩ噴鎵惧埌浜嗗埄鐢ㄨ蒋浠舵紡娲炵殑绾跨储銆傛牴鎹?STRIDE 妯″瀷锛屼粬鍙戠幇鐨勬槸鍝绫诲瀷鐨勬敾鍑伙紵
- 棰樺簱锛欸ary姝ｅ湪鍒嗘瀽涓€涓畨鍏ㄤ簨浠躲€傚湪璋冩煡鏈熼棿锛屼粬鍙戠幇鏈変竴涓敤鎴峰惁璁や粬鏇惧仛鐨勪簨锛屼絾Gary鐩镐俊杩欎釜鐢ㄦ埛鍋氳繃銆傛牴鎹甋TRIDE妯″瀷锛屽彂鐢熶簡浠€涔堢被鍨嬬殑濞佽儊锛烥ary is analyzing a security incident and, during his investigation, encount...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M024 identity / 韬唤
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歩dentity銆佽韩浠姐€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涜ˉ鍏呰祫鏂?1锛涢搴撳弽鎺?110锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?110銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 110 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 韬唤涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 identity锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍥㈤槦寮€鍙戣蒋浠舵椂锛屼笉鑳藉彧璇寸郴缁熷彲鑳借鏀诲嚮锛岃繕瑕佽鏀诲嚮灞炰簬鍝被銆佷細鍒╃敤鍝釜婕忔礊銆佷細浼ゅ埌鍝釜璧勪骇銆?鍥犱负濞佽儊鏁伴噺鍑犱箮鏃犻檺锛屾墍浠ラ渶瑕佺粨鏋勫寲鍒嗙被鏂规硶銆?Focused on Software 鏄粠杞欢瑙掑害鑰冭檻娼滃湪濞佽儊銆傚父瑙佸仛娉曟槸鎶?threats 鍜?vulnerabilities 閰嶅锛屾壘鍑鸿兘鍒╃敤璧勪骇骞堕€犳垚鏄捐憲椋庨櫓鐨勭粍鍚堛€?STRIDE 鏄?Microsoft...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 identity锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉銆?闂兘璁块棶浠€涔堢湅鎺堟潈銆?闂潈闄愭ā鍨嬬湅 RBAC銆丄BAC銆丏AC銆丮AC銆?闂簨鍚庤拷璐ｇ湅鏃ュ織銆佸璁″拰璁拌处銆?/li>
- 鐪嬪埌 identity锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉
- 闂兘璁块棶浠€涔堢湅鎺堟潈
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細韬唤涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 identity锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氬▉鑳佽瘑鍒€丼TRIDE 涓?PASTA 寮€澶?- 濞佽儊鍙互浠庤蒋浠躲€佹紡娲炲拰璧勪骇鍏崇郴鍑哄彂璇嗗埆锛汼TRIDE 甯姪鍒嗙被鏀诲嚮绫诲瀷锛汸ASTA 鏄闄╀腑蹇冪殑涓冮樁娈靛▉鑳佸缓妯℃柟娉曘€?/li>
- 琛ュ厖璧勬枡锛欴omain 1鈥擲ecurity and Risk Management Domain 2鈥擜sset Security Domain 3鈥擲ecurity Architecture and E - OVERVIEW OF CONTENTS Why This Book About the Exam Mindset About the Autho...
- 棰樺簱锛歍he guarantee that the message sent is the message received, and that the message was not intentionally or unintentionally altered is? 淇濊瘉鍙戦€佺殑娑堟伅姝ｆ槸琚帴鏀剁殑娑?..
- 棰樺簱锛欰 reference monitor is a system component that enforces access controls on an object. Specifically, the reference monitor concept is an abstract mach...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M026 Auditing / 瀹¤
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氱缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欰uditing銆佸璁°€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?17锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?17銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 17 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 瀹¤涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 Auditing锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鐨勫叕鍙稿湪澶氫釜鍥藉鍋氫笟鍔★紝鏈夊鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢杩炴帴鍜屽憳宸ュ悗鍙般€侷T 鍙互瑁呭伐鍏枫€佷慨鏈嶅姟鍣ㄣ€侀厤缃处鍙凤紝浣嗘湁浜涢棶棰?IT 鑷繁涓嶈兘鍐冲畾銆?姣斿锛氭硶寰嬭姹傚鎴疯祫鏂欐€庝箞淇濆瓨锛岃涓氳姹傜郴缁熸€庝箞瀹¤锛屽悎鍚岃姹傛湇鍔″涔呬笉鑳戒腑鏂紝绠＄悊灞傛効鎰忚姳澶氬皯閽卞噺灏戝仠鏈恒€?杩欏氨鏄?security governance銆傛崲鍙ヨ瘽璇达細鍏徃鐢ㄤ竴濂楃鐞嗘柟娉曪紝鎶婂畨鍏ㄧ洰鏍囥€佽矗浠汇€佺洃鐫ｃ€佸...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Auditing锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control review 鐪嬪璁°€?/li>
- 鐪嬪埌 Auditing锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細瀹¤涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 Auditing锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴...
- 瀛︿範鍗曞厓锛氬畨鍏ㄦ不鐞嗭細涓轰粈涔堜笉鏄?IT 鑷繁绠★紝鑰屾槸鍏ㄥ叕鍙镐竴璧风 - 娉曞緥銆佺洃绠°€佽涓氳姹傚拰妗嗘灦浼氭帹鍔ㄥ叕鍙告不鐞嗗畨鍏紱瀹夊叏娌荤悊缁欏叏鍏徃鏂瑰悜銆佺洃鐫ｅ拰绠＄悊鏂规硶锛岀洰鏍囨槸鍑忓皯鍋滄満鍜屾崯澶憋紝涔熷寘鎷绗笁鏂圭殑澶栭儴鐩戠潱銆?/li>
- 棰樺簱锛歐hat Distributed Computing Environment (DCE) component provides a mechanism to ensure that services are made available only to properly designated pa...
- 棰樺簱锛歐hich choice below would NOT be considered an element of proper user account management? 浠ヤ笅鍝竴閫夐」涓嶆槸鍚堥€傜敤鎴疯处鎴风鐞嗙殑鍏冪礌锛?/li>
- 棰樺簱锛欰 reference monitor is a system component that enforces access controls on an object. Specifically, the reference monitor concept is an abstract mach...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M027 Authentication / 璁よ瘉
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欰uthentication銆佽璇併€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?171锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?171銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 171 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 璁よ瘉涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 Authentication锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 鏍囬锛氥€婅蒋浠躲€佸簲鐢ㄤ笌渚涘簲閾俱€?杩欓〉鍦ㄨ浠€涔堬細 杩欓〉鍦ㄨ锛氶闄╂槸浠庨渶姹傘€佽璁°€佷唬鐮併€佽緭鍏ャ€佹祴璇曘€侀儴缃层€佺涓夋柟缁勪欢杩樻槸渚涘簲鍟嗕氦浠樿繘鍏ョ郴缁熴€?鐜板疄閲屾€庝箞鍙戠敓锛?鍋囪鍏徃鏈夌櫥褰曟銆佹悳绱㈡銆佺暀瑷€鏉裤€佽浆璐︽寜閽€丄PI銆佺涓夋柟搴撳拰渚涘簲鍟嗕氦浠樼殑杞欢銆傜敤鎴疯緭鍏ュ彲鑳借褰撴垚鏁版嵁搴撳懡浠わ紝缃戦〉鍐呭鍙兘鍙樻垚鑴氭湰锛岀櫥褰曠姸鎬佸彲鑳借鍊熺敤锛屼緵搴斿晢缁勪欢涔熷彲鑳藉甫鏉ユ紡娲炪€?鏈夊嚑浠朵簨鍙兘鍙戠敓锛?-...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Authentication锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉銆?闂兘璁块棶浠€涔堢湅鎺堟潈銆?闂潈闄愭ā鍨嬬湅 RBAC銆丄BAC銆丏AC銆丮AC銆?闂簨鍚庤拷璐ｇ湅鏃ュ織銆佸璁″拰璁拌处銆?/li>
- 鐪嬪埌 Authentication锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉
- 闂兘璁块棶浠€涔堢湅鎺堟潈
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細璁よ瘉涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 Authentication锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氳蒋浠躲€佸簲鐢ㄤ笌渚涘簲閾?- 椋庨櫓鏄粠闇€姹傘€佽璁°€佷唬鐮併€佽緭鍏ャ€佹祴璇曘€侀儴缃层€佺涓夋柟缁勪欢杩樻槸渚涘簲鍟嗕氦浠樿繘鍏ョ郴缁熴€?/li>
- 棰樺簱锛欰 type of preventive/physical access control is: 棰勯槻/鐗╃悊璁块棶鎺у埗绫诲瀷鏄細
- 棰樺簱锛欴uring which phase of an IT system life cycle are security requirements developed? 鍦?IT 绯荤粺鐢熷懡鍛ㄦ湡鐨勫摢涓€闃舵寮€鍙戝畨鍏ㄩ渶姹?
- 棰樺簱锛歍he definition of CHAP is: CHAP鐨勫畾涔夋槸锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M028 COBIT
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹硶寰?鍚堣銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欳OBIT銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 1锛涢搴撳弽鎺?12锛涘畼鏂圭粌涔?1锛涢搴撳懡涓?12銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 1 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 12 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- COBIT涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 COBIT锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 COBIT锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊銆?鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋勩€?鐪嬪埌 PCI DSS 鎯虫敮浠樺崱銆?鐪嬪埌 FedRAMP 鎯宠仈閭︿簯銆?鐪嬪埌 ISO/NIST/ITIL 鍒嗗埆鐪嬬鐞嗕綋绯汇€佹寚鍗楀拰鏈嶅姟绠＄悊銆?/li>
- 鐪嬪埌 COBIT锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊
- 鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細COBIT涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 COBIT锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀹樻柟棰橈細C. 椋庨櫓鎴愮啛搴︽ā鍨嬶紙RMM锛変笓涓鸿瘎浼颁紒涓氶闄╃鐞嗚鍒掕€岃璁°€傛澃澶悊璁轰笂鍙互浣跨敤鏇撮€氱敤鐨勮兘鍔涙垚鐔熷害妯″瀷锛圕MM锛夛紝浣嗗畠骞堕潪鏈€浣抽€夋嫨銆傝蒋浠惰兘鍔涙垚鐔熷害妯″瀷锛圫W-CMM锛夌敤浜庤瘎浼板紑鍙戦」鐩紝鑰岄潪椋庨櫓绠＄悊宸ヤ綔銆備俊鎭妧鏈帶鍒剁洰鏍囷紙COBIT锛夋槸涓€缁勫畨鍏ㄦ帶鍒剁洰鏍囷紝鑰岄潪鎴愮啛搴︽ā鍨嬨€?/li>
- 棰樺簱锛欰aron鎯宠楠岃瘉浠栨槸鍚︾鍚圥CI-DSS鐨勫悎瑙勬€с€備粬鐨勫叕鍙告槸涓€瀹跺ぇ鍨嬪晢涓氱粍缁囷紝姣忓勾鐨勪氦鏄撻杈炬暟鐧句竾缇庡厓銆傚澶у瀷缁勭粐杩涜姝ょ被娴嬭瘯鐨勬渶甯哥敤鏂规硶鏄粈涔堬紵 Aaron wants to validate his compliance with PCI-DSS. His company is a larg...
- 棰樺簱锛歂icole甯屾湜瀵瑰ス鐨勭粍缁囪繘琛屽熀浜庢爣鍑嗙殑瀹¤銆備互涓嬪摢椤瑰父鐢ㄤ簬鎻忚堪淇℃伅绯荤粺鐨勫父瑙侀渶姹傦紵 Nicole wants to conduct a standards-based audit of her organization. Which of the following is commonly us...
- 棰樺簱锛欽eff 甯屾湜閲囩敤琛屼笟鏍囧噯鏂规硶鏉ヨ瘎浼板叾缁勭粐鐢ㄤ簬绠＄悊椋庨櫓鐨勬祦绋嬨€傚摢绉嶆垚鐔熷害妯″瀷鏈€閫傚悎浠栫殑浣跨敤锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M029 incident response / 浜嬩欢鍝嶅簲
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歩ncident response銆佷簨浠跺搷搴斻€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?37锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?37銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 37 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 浜嬩欢鍝嶅簲涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 incident response锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 incident response锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 incident response锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 棰樼洰闂?incident response program 涓轰簡鍙栬瘉蹇呴』鎬庝箞鍋氾紝灏遍€?treat every incident as though it may be a crime銆?鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€淭o ensure proper forensics action when needed, an incident response p...
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細浜嬩欢鍝嶅簲涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 incident response锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛歍o ensure proper forensics action when needed, an incident response program must:涓轰簡纭繚鍦ㄩ渶瑕佹椂姝ｇ‘鐨勫彇璇佹椿鍔紝涓€涓簨浠跺搷搴旂▼搴忓繀椤伙細
- 棰樺簱锛歍riage encompasses which of the following incident response sub-phases? 鍒嗙被鐫€閲嶄簬浠ヤ笅鍝釜浜嬩欢鍝嶅簲瀛愰樁娈靛憿锛?/li>
- 棰樺簱锛欳omputer forensics requires which of the following MAIN steps?璁＄畻鏈哄彇璇侀渶瑕佷互涓嬪摢涓富瑕佹楠わ紵
- 棰樺簱锛歐hat is the PRIMARY objective of the post-incident phase of the incident response process in the security operations center (SOC)?瀹夊叏杩愯惀涓績(SOC)浜嬫晠鍝嶅簲娴佺▼鐨勪簨...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欰AA銆丄AA 鏈嶅姟銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?11锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?11銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 11 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- AAA 鏈嶅姟涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 AAA锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 AAA锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 AAA锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鏍囪交搴︿簤璁紱鍦ㄧ粰瀹氶€夐」涓繚鐣?TACACS+銆?鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€滀互涓嬪摢绉?AAA 鍗忚鏄渶甯哥敤鐨勶紵 Which of the following AAA protocols is the most commonly used?鈥濄€?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細AAA 鏈嶅姟涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 AAA锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛氫互涓嬪摢绉岮AA鍗忚鏄渶甯哥敤鐨勶紵Which of the following AAA protocols is the most commonly used?
- 棰樺簱锛氫互涓嬪摢椤规槸瀹㈡埛绔湇鍔″櫒鍗忚锛屾棬鍦ㄥ厑璁哥綉缁滆闂湇鍔″櫒锛岄€氳繃鍚戜腑澶湇鍔″櫒鍙戦€佽闂姹傛秷鎭潵楠岃瘉杩滅▼鐢ㄦ埛锛焀hich of the following is a client/server protocol designed to allow network access servers to auth...
- 棰樺簱锛欳harles甯屾湜鎻愪緵鎺堟潈鏈嶅姟浣滀负鍏禬eb搴旂敤绋嬪簭鐨勪竴閮ㄥ垎銆傚鏋滀粬鎯充笌鍏朵粬Web韬唤鎻愪緵鍟嗚交鏉鹃泦鎴愶紝浠栧簲璇ヤ娇鐢ㄤ粈涔堟爣鍑咰harles wants to provide authorization services as part of his web application. What stand...
- 棰樺簱锛氬瓨鍌ㄥ拰鐢熸垚瀵嗙爜銆?鎻愪緵鏃ュ織璁板綍鍜屽璁″姛鑳戒互鍙婃敮鎸佸瘑鐮佹鍏ュ拰妫€鍑洪兘鏄粈涔堢被鍨嬬郴缁熺殑鐗瑰緛锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M032 Authorization / 鎺堟潈
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欰uthorization銆佹巿鏉冦€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?62锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?62銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 62 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎺堟潈涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 Authorization锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Authorization锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉銆?闂兘璁块棶浠€涔堢湅鎺堟潈銆?闂潈闄愭ā鍨嬬湅 RBAC銆丄BAC銆丏AC銆丮AC銆?闂簨鍚庤拷璐ｇ湅鏃ュ織銆佸璁″拰璁拌处銆?/li>
- 鐪嬪埌 Authorization锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉
- 闂兘璁块棶浠€涔堢湅鎺堟潈
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎺堟潈涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 Authorization锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛歂on-Discretionary Access Control. A central authority determines what subjects can have access to certain objects based on the organizational securit...
- 棰樺簱锛欼n what security mode can a system be operating if all users have the clearance or authorization and need-to-know to all data processed within the sy...
- 棰樺簱锛欰 reference monitor is a system component that enforces access controls on an object. Specifically, the reference monitor concept is an abstract mach...
- 棰樺簱锛歐hich choice is the BEST description of authentication as opposed to authorization?涓庢巿鏉冪浉鍙嶏紝浠ヤ笅鍝竴閫夐」鏈€鑳芥弿杩拌韩浠介獙璇?
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M033 Encryption / 鍔犲瘑
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欵ncryption銆佸姞瀵嗐€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?127锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?127銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 127 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鍔犲瘑涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚瀛樼敤鎴峰瘑鐮併€佷紶杈撳鎴疯祫鏂欍€佺‘璁ゅ悎鍚屾湁娌℃湁琚敼銆佽瘉鏄庢秷鎭槸璋佸彂鐨勩€佺‘璁ょ綉绔欒瘉涔︽槸鍚﹀彲淇°€傛瘡涓洰鏍囬兘涓嶄竴鏍凤紝涓嶈兘鐪嬪埌绠楁硶鍚嶅氨鐩存帴閫夈€?姣斿锛氬姞瀵嗕富瑕佽鍒汉鐪嬩笉鎳傚唴瀹广€?鎵€浠ヨ€冭瘯鐪嬪埌 Encryption锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Encryption锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃瘑鐮併€佸搱甯屻€佺鍚嶄笌璇佷功鈥濆垽鏂細闂繚瀵嗙湅鍔犲瘑銆?闂獙鏀瑰姩鐪嬪搱甯屾垨娑堟伅鎽樿銆?闂潵婧愬拰涓嶅彲鍚﹁鐪嬫暟瀛楃鍚嶃€?闂韩浠藉拰鍏挜缁戝畾鐪嬭瘉涔?PKI銆?/li>
- 鐪嬪埌 Encryption锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滃瘑鐮併€佸搱甯屻€佺鍚嶄笌璇佷功鈥濆垽鏂細闂繚瀵嗙湅鍔犲瘑
- 闂獙鏀瑰姩鐪嬪搱甯屾垨娑堟伅鎽樿
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鍔犲瘑涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚瀛樼敤鎴峰瘑鐮併€佷紶杈撳鎴疯祫鏂欍€佺‘璁ゅ悎鍚屾湁娌℃湁琚敼銆佽瘉鏄庢秷鎭槸璋佸彂鐨勩€佺‘璁ょ綉绔欒瘉涔︽槸鍚﹀彲淇°€傛瘡涓洰鏍囬兘涓嶄竴鏍凤紝涓嶈兘鐪嬪埌绠楁硶鍚嶅氨鐩存帴閫夈€?姣斿锛氬姞瀵嗕富瑕佽鍒汉鐪嬩笉鎳傚唴瀹广€?鎵€浠ヨ€冭瘯鐪嬪埌 Encryption锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛歁aking sure that the data is accessible when and where it is needed is which of the following?纭繚鍦ㄤ綍鏃朵綍鍦伴兘鑳借闂暟鎹槸涓嬪垪鍝竴椤癸紵
- 棰樺簱锛歍he primary purpose for using one-way hashing of user passwords within a password file is which of the following?鍦ㄥ瘑鐮佹枃浠朵腑浣跨敤鐢ㄦ埛瀵嗙爜鐨勫崟鍚戞暎鍒楃殑涓昏鐩殑鏄互涓嬪摢涓紵
- 棰樺簱锛欵ncryption is applicable to all of the following OSI/ISO layers except: 鍔犲瘑閫傜敤浜庝互涓嬫墍鏈塐SI/ISO灞傦紝闄や簡锛?/li>
- 棰樺簱锛歐hich of the following elements is not included in a Public Key Infrastructure (PKI)?涓嬪垪鍝釜鍏冪礌涓嶅寘鎷湪鍏挜鍩虹璁炬柦(PKI)涓?
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M034 IDS / 鍏ヤ镜妫€娴嬬郴缁?IDS
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欼DS銆佸叆渚垫娴嬬郴缁?IDS銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?58锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?58銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 58 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鍏ヤ镜妫€娴嬬郴缁?IDS涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪瀹㈡埛璁块棶缃戠珯锛岃繙绋嬪憳宸ヨ繛 VPN锛屽垎鏀満鏋勮繛鎬婚儴鏁版嵁搴擄紝鏈嶅姟鍣ㄨ闂簯鏈嶅姟銆傛祦閲忓彲鑳界粡杩囧叕缃戙€佹棤绾裤€丏MZ銆侀槻鐏銆佷唬鐞嗐€佽矾鐢卞櫒銆佷氦鎹㈡満銆佸唴缃戝拰浜戣竟鐣屻€?姣斿锛歏PN 鏄叕鍏辩綉缁滀笂鐨勫彈淇濇姢閫氶亾銆?鎵€浠ヨ€冭瘯鐪嬪埌 IDS锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 IDS锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滅綉缁溿€侀€氫俊涓庤竟鐣屸€濆垽鏂細鍏堟壘婧愬ご銆佺洰鏍囥€佸崗璁€佺鍙ｅ拰杈圭晫銆?鍐嶇湅棰樼洰闂繃婊ゃ€侀毀閬撱€佸姞瀵嗐€佽璇併€佸垎娈佃繕鏄娴嬨€?鏈€鍚庨€夋渶璐磋矾寰勭殑鎺у埗銆?/li>
- 鐪嬪埌 IDS锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍐嶇湅棰樼洰闂繃婊ゃ€侀毀閬撱€佸姞瀵嗐€佽璇併€佸垎娈佃繕鏄娴?/li>
- 鏈€鍚庨€夋渶璐磋矾寰勭殑鎺у埗
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鍏ヤ镜妫€娴嬬郴缁?IDS涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪瀹㈡埛璁块棶缃戠珯锛岃繙绋嬪憳宸ヨ繛 VPN锛屽垎鏀満鏋勮繛鎬婚儴鏁版嵁搴擄紝鏈嶅姟鍣ㄨ闂簯鏈嶅姟銆傛祦閲忓彲鑳界粡杩囧叕缃戙€佹棤绾裤€丏MZ銆侀槻鐏銆佷唬鐞嗐€佽矾鐢卞櫒銆佷氦鎹㈡満銆佸唴缃戝拰浜戣竟鐣屻€?姣斿锛歏PN 鏄叕鍏辩綉缁滀笂鐨勫彈淇濇姢閫氶亾銆?鎵€浠ヨ€冭瘯鐪嬪埌 IDS锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰?..
- 棰樺簱锛歐hich of the following questions is less likely to help in assessing identification and authentication controls?浠ヤ笅鍝竴闂涓嶅お鍙兘瀵硅瘎浼伴壌瀹氬拰璁よ瘉鎺у埗鏈夊府鍔╋紵
- 棰樺簱锛欼ntrusion detection has which of the following sets of characteristics?鍏ヤ镜妫€娴嬪叿鏈変笅鍒楀摢缁勭壒寰侊紵
- 棰樺簱锛歐hich of the following best describes the Secure Electronic Transaction (SET) protocol?浠ヤ笅鍝」鏈€鑳芥弿杩板畨鍏ㄧ數瀛愪氦鏄?SET)鍗忚?
- 棰樺簱锛歐hat is a Land attack and what type of IDS can identify it based on its pattern and not behavior?浠€涔堟槸Land鏀诲嚮锛屼粈涔堢被鍨嬬殑鍏ヤ镜妫€娴嬬郴缁熷彲浠ュ熀浜庢牱鏈€屼笉鏄涓哄幓璇嗗埆瀹冿紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M035 IPS / 鍏ヤ镜闃插尽绯荤粺 IPS
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛欼PS銆佸叆渚甸槻寰＄郴缁?IPS銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?33锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?33銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 33 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鍏ヤ镜闃插尽绯荤粺 IPS涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪瀹㈡埛璁块棶缃戠珯锛岃繙绋嬪憳宸ヨ繛 VPN锛屽垎鏀満鏋勮繛鎬婚儴鏁版嵁搴擄紝鏈嶅姟鍣ㄨ闂簯鏈嶅姟銆傛祦閲忓彲鑳界粡杩囧叕缃戙€佹棤绾裤€丏MZ銆侀槻鐏銆佷唬鐞嗐€佽矾鐢卞櫒銆佷氦鎹㈡満銆佸唴缃戝拰浜戣竟鐣屻€?姣斿锛歏PN 鏄叕鍏辩綉缁滀笂鐨勫彈淇濇姢閫氶亾銆?鎵€浠ヨ€冭瘯鐪嬪埌 IPS锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 IPS锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滅綉缁溿€侀€氫俊涓庤竟鐣屸€濆垽鏂細鍏堟壘婧愬ご銆佺洰鏍囥€佸崗璁€佺鍙ｅ拰杈圭晫銆?鍐嶇湅棰樼洰闂繃婊ゃ€侀毀閬撱€佸姞瀵嗐€佽璇併€佸垎娈佃繕鏄娴嬨€?鏈€鍚庨€夋渶璐磋矾寰勭殑鎺у埗銆?/li>
- 鐪嬪埌 IPS锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍐嶇湅棰樼洰闂繃婊ゃ€侀毀閬撱€佸姞瀵嗐€佽璇併€佸垎娈佃繕鏄娴?/li>
- 鏈€鍚庨€夋渶璐磋矾寰勭殑鎺у埗
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鍏ヤ镜闃插尽绯荤粺 IPS涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪瀹㈡埛璁块棶缃戠珯锛岃繙绋嬪憳宸ヨ繛 VPN锛屽垎鏀満鏋勮繛鎬婚儴鏁版嵁搴擄紝鏈嶅姟鍣ㄨ闂簯鏈嶅姟銆傛祦閲忓彲鑳界粡杩囧叕缃戙€佹棤绾裤€丏MZ銆侀槻鐏銆佷唬鐞嗐€佽矾鐢卞櫒銆佷氦鎹㈡満銆佸唴缃戝拰浜戣竟鐣屻€?姣斿锛歏PN 鏄叕鍏辩綉缁滀笂鐨勫彈淇濇姢閫氶亾銆?鎵€浠ヨ€冭瘯鐪嬪埌 IPS锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰?..
- 棰樺簱锛欰 new employee is given a laptop computer with full administrator access. This employee does not have a personal computer at home and has a child tha...
- 棰樺簱锛欰 recent information security risk assessment identified weak system access controls on mobile devices as a high risk. In order to address this risk...
- 棰樺簱锛歍o comply with industry requirements, a security assessment on the cloud server should identify which protocols and weaknesses are being exposed to a...
- 棰樺簱锛歨e security organization is loading for a solution that could help them determine with a strong level of confident that attackers have breached their...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歄SI銆丱SI 妯″瀷銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?54锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?54銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 54 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- OSI 妯″瀷鎶婄綉缁滈€氫俊鎷嗘垚涓冨眰锛屾柟渚垮畾浣嶉棶棰樺彂鐢熷湪鍝噷銆傛瘮濡傜綉绾夸俊鍙锋槸鐗╃悊灞傦紝MAC 鍜屼氦鎹㈡槸鏁版嵁閾捐矾灞傦紝IP 璺敱鏄綉缁滃眰锛岀鍙ｅ拰 TCP/UDP 鏄紶杈撳眰锛岀綉椤靛拰 DNS 鏇撮潬搴旂敤灞傘€傚畠鏄畾浣嶈瑷€锛屼笉鏄煇涓澶囨湰韬€?/li>
鑰冮淇″彿锛?/p>
- 缃戠粶棰樼湅鍒?protocol銆乨evice銆乤ttack layer锛屽厛鍒ゆ柇瀹冨湪鍝竴灞傦紝鍐嶉€夌瓟妗堛€?/li>
- 缃戠粶棰樼湅鍒?protocol銆乨evice銆乤ttack layer锛屽厛鍒ゆ柇瀹冨湪鍝竴灞傦紝鍐嶉€夌瓟妗?/li>
- 棰樼洰闂?not a defined layer in TCP/IP锛屽氨閫?Session layer銆?鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€淲hich of the following is not a defined layer in the TCP/IP protocol model? 涓嬪垪鍝竴閫夐」涓嶆槸 TCP / IP 鍗忚妯″瀷瀹氫箟鐨勫眰?鈥濄€?/li>
- 棰樼洰闂?encryption applicable to OSI layers EXCEPT锛屽氨閫?Physical layer銆?鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€淓ncryption is applicable to all of the following OSI/ISO layers except: 鍔犲瘑閫傜敤浜庝互涓嬫墍鏈?OSI/ISO 灞傦紝闄や簡锛氣€濄€?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細OSI 妯″瀷鎶婄綉缁滈€氫俊鎷嗘垚涓冨眰锛屾柟渚垮畾浣嶉棶棰樺彂鐢熷湪鍝噷銆傛瘮濡傜綉绾夸俊鍙锋槸鐗╃悊灞傦紝MAC 鍜屼氦鎹㈡槸鏁版嵁閾捐矾灞傦紝IP 璺敱鏄綉缁滃眰锛岀鍙ｅ拰 TCP/UDP 鏄紶杈撳眰锛岀綉椤靛拰 DNS 鏇撮潬搴旂敤灞傘€傚畠鏄畾浣嶈瑷€锛屼笉鏄煇涓澶囨湰韬€?/li>
- 棰樺簱锛歐hich of the following is not a defined layer in the TCP/IP protocol model? 涓嬪垪鍝竴閫夐」涓嶆槸TCP / IP鍗忚妯″瀷瀹氫箟鐨勫眰?
- 棰樺簱锛欵ncryption is applicable to all of the following OSI/ISO layers except: 鍔犲瘑閫傜敤浜庝互涓嬫墍鏈塐SI/ISO灞傦紝闄や簡锛?/li>
- 棰樺簱锛歐hich of the choices below is NOT an OSI reference model Session Layer protocol, standard, or interface? 浠ヤ笅鍝竴閫夐」涓嶆槸OSI鍙傝€冩ā鍨嬩細璇濆眰鍗忚锛屾爣鍑嗘垨鎺ュ彛锛?/li>
- 棰樺簱锛歐hich of the following best describes the Secure Electronic Transaction (SET) protocol?浠ヤ笅鍝」鏈€鑳芥弿杩板畨鍏ㄧ數瀛愪氦鏄?SET)鍗忚?
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M038 Security Boundary / 瀹夊叏杈圭晫
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歋ecurity Boundary銆佸畨鍏ㄨ竟鐣屻€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?10锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?10銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 10 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 瀹夊叏杈圭晫涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Security Boundary锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鐨勭▼搴忓憳鍙戠幇绯荤粺閲屾湁涓€涓紡娲烇紝鍗村喅瀹氬厛鍙戝竷浜у搧锛屽績閲屾兂锛氣€滃彧瑕佹病浜哄彂鐜拌繖涓礊锛屽氨娌′簨銆傗€?杩欏惉璧锋潵鍍忎繚鎶わ紝鍏跺疄涓嶆槸銆傚洜涓轰竴鏃﹀埆浜哄彂鐜版紡娲烇紝灏卞彲浠ュ埄鐢紱绯荤粺骞舵病鏈夌湡姝ｉ樆姝㈣闂垨鏀诲嚮銆?杩欑鍋氭硶鍙?security through obscurity銆傛崲鍙ヨ瘽璇达細瀹冩槸 digital hide and seek锛屽彧鏄妸鐭ヨ瘑钘忚捣鏉ワ紝甯屾湜鍒汉鎵句笉鍒帮紝骞舵病鏈夌湡姝ｅ疄...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Security Boundary锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 Security Boundary锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鍏堢湅棰樼洰鏄湪闂潬闅愯棌渚ュ垢銆佸姞瀵嗗唴瀹癸紝杩樻槸涓嶅悓瀹夊叏鍖哄煙涔嬮棿鐨勮竟鐣?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細瀹夊叏杈圭晫涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Security Boundary锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氫笉瑕侀潬渚ュ垢闅愯棌锛歄bscurity銆丒ncryption 涓?Security Boundaries - security through obscurity 鍙槸甯屾湜鍒汉鍙戠幇涓嶄簡锛屽苟涓嶆槸鐪熶繚鎶わ紱encryption 闅愯棌閫氫俊鍚箟锛泂ecurity boundary 鏄笉鍚屽畨鍏ㄩ渶姹傚尯鍩熺殑浜ょ晫绾匡紝蹇呴』鎺у埗璺ㄨ竟鐣屼俊鎭祦銆?/li>
- 棰樺簱锛歄ne reason an organization would consider a distributed application is:涓€涓粍缁囦細鑰冭檻鍒嗗竷寮忓簲鐢ㄧ殑鍘熷洜涔嬩竴鏄細
- 棰樺簱锛歍he existence of physical barriers, card and personal identification number (PIN) access systems, cameras, alarms, and security guards BEST describes...
- 棰樺簱锛歐hich of the following is a correct feature of a virtual local area network (VLAN)?浠ヤ笅鍝竴椤规槸铏氭嫙灞€鍩熺綉(VLAN)鐨勬纭壒寰侊紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M039 VPN / 铏氭嫙涓撶敤缃戠粶 VPN
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歏PN銆佽櫄鎷熶笓鐢ㄧ綉缁?VPN銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?58锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?58銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 58 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 铏氭嫙涓撶敤缃戠粶 VPN涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪瀹㈡埛璁块棶缃戠珯锛岃繙绋嬪憳宸ヨ繛 VPN锛屽垎鏀満鏋勮繛鎬婚儴鏁版嵁搴擄紝鏈嶅姟鍣ㄨ闂簯鏈嶅姟銆傛祦閲忓彲鑳界粡杩囧叕缃戙€佹棤绾裤€丏MZ銆侀槻鐏銆佷唬鐞嗐€佽矾鐢卞櫒銆佷氦鎹㈡満銆佸唴缃戝拰浜戣竟鐣屻€?姣斿锛歏PN 鏄叕鍏辩綉缁滀笂鐨勫彈淇濇姢閫氶亾銆?鎵€浠ヨ€冭瘯鐪嬪埌 VPN锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 VPN锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滅綉缁溿€侀€氫俊涓庤竟鐣屸€濆垽鏂細鍏堟壘婧愬ご銆佺洰鏍囥€佸崗璁€佺鍙ｅ拰杈圭晫銆?鍐嶇湅棰樼洰闂繃婊ゃ€侀毀閬撱€佸姞瀵嗐€佽璇併€佸垎娈佃繕鏄娴嬨€?鏈€鍚庨€夋渶璐磋矾寰勭殑鎺у埗銆?/li>
- 鐪嬪埌 VPN锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍐嶇湅棰樼洰闂繃婊ゃ€侀毀閬撱€佸姞瀵嗐€佽璇併€佸垎娈佃繕鏄娴?/li>
- 鏈€鍚庨€夋渶璐磋矾寰勭殑鎺у埗
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細铏氭嫙涓撶敤缃戠粶 VPN涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪瀹㈡埛璁块棶缃戠珯锛岃繙绋嬪憳宸ヨ繛 VPN锛屽垎鏀満鏋勮繛鎬婚儴鏁版嵁搴擄紝鏈嶅姟鍣ㄨ闂簯鏈嶅姟銆傛祦閲忓彲鑳界粡杩囧叕缃戙€佹棤绾裤€丏MZ銆侀槻鐏銆佷唬鐞嗐€佽矾鐢卞櫒銆佷氦鎹㈡満銆佸唴缃戝拰浜戣竟鐣屻€?姣斿锛歏PN 鏄叕鍏辩綉缁滀笂鐨勫彈淇濇姢閫氶亾銆?鎵€浠ヨ€冭瘯鐪嬪埌 VPN锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰?..
- 棰樺簱锛歐hich of the following statements pertaining to VPN protocol standards is false?涓嬪垪鏈夊叧铏氭嫙涓撶敤缃慥PN鍗忚鏍囧噯鐨勯檲杩帮紝鍝釜鏄敊璇殑?
- 棰樺簱锛欼n a wireless General Packet Radio Services (GPRS) Virtual Private Network (VPN) application, which of the following security protocols is commonly u...
- 棰樺簱锛歐hich of the following is NOT a VPN remote computing protocol?涓嬪垪鍝竴椤逛笉鏄疺PN杩滅▼璁＄畻鍗忚?
- 棰樺簱锛欰 company must support legacy applications that use risky protocols such as plain-text passwords. Which option can reduce this network risk? 鍏徃蹇呴』缁х画鏀寔...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M040 audit / 瀹¤
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氱缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歛udit銆佸璁°€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?111锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?111銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 111 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 瀹¤涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 audit锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 audit锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control review 鐪嬪璁°€?/li>
- 鐪嬪埌 audit锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細瀹¤涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 audit锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛歐hat Distributed Computing Environment (DCE) component provides a mechanism to ensure that services are made available only to properly designated pa...
- 棰樺簱锛歐hich choice below would NOT be considered an element of proper user account management? 浠ヤ笅鍝竴閫夐」涓嶆槸鍚堥€傜敤鎴疯处鎴风鐞嗙殑鍏冪礌锛?/li>
- 棰樺簱锛歐hich question is NOT true concerning Application Control?鍏充簬搴旂敤绋嬪簭鎺у埗锛屽摢涓€闂涓嶆槸姝ｇ‘鐨?
- 棰樺簱锛歐hich of the following is needed for System Accountability?濡傛灉瑕佸疄鐜扮郴缁熺殑鍙棶璐ｆ€э紝涓嬮潰鍝潯鏄渶瑕佺殑锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M041 cost-effective / 鎴愭湰鏁堢泭
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氱缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歝ost-effective銆佹垚鏈晥鐩娿€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?12锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?12銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 12 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎴愭湰鏁堢泭涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 cost-effective锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 cost-effective锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control review...
- 鐪嬪埌 cost-effective锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎴愭湰鏁堢泭涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 cost-effective锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜?..
- 棰樺簱锛欰 small office is running WiFi 4 APs, and neighboring offices do not want to increase the throughput to associated devices. Which of the following is...
- 棰樺簱锛欰n organization outgrew its internal data center and is evaluating third-party hosting facilities. In this evaluation, which of the following is a PR...
- 棰樺簱锛欰 firm within the defense industry has been directed to comply with contractual requirements for encryption of a government client's Controlled Uncla...
- 棰樺簱锛歐hat does the result of Cost-Benefit Analysis (CBA) on new security initiatives provide? 鏂扮殑瀹夊叏璁″垝鐨勬垚鏈晥鐩婂垎鏋?(CBA) 鐨勭粨鏋滄彁渚涗簡浠€涔堬紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M042 vulnerability scan / 婕忔礊鎵弿
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氱缉鍐?鑻辨枃棰樼溂銆侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歷ulnerability scan銆佹紡娲炴壂鎻忋€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?42锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?42銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 42 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 婕忔礊鎵弿涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 vulnerability scan锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 vulnerability scan锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control re...
- 鐪嬪埌 vulnerability scan锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細婕忔礊鎵弿涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 vulnerability scan锛屽厛闂畠鏄湪瑙?..
- 棰樺簱锛歍he major benefit of information classification is to淇℃伅鍒嗙被鐨勪富瑕佸ソ澶?/li>
- 棰樺簱锛欰n establish information technology (IT) consulting firm is considering acquiring a successful local startup. To gain a comprehensive understanding o...
- 棰樺簱锛歍o minimize the vulnerabilities of a web-based application, which of the following FIRST actions will lock down the system and minimize the risk of a...
- 棰樺簱锛歐hich of the following is the MOST effective method of detecting vulnerabilities in web-based applications early in the secure Software Development L...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M043 due care / 搴旀湁璋ㄦ厧
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歞ue care銆佸簲鏈夎皑鎱庛€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?9锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?9銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 9 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 搴旀湁璋ㄦ厧涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 due care锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 due care锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓銆?闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗椼€?闂?first/best锛岄€氬父鍏堝畾鑼冨洿銆佽矗浠汇€佺鐞嗘敮鎸佹垨椋庨櫓璇勪及锛屽啀閫夊伐鍏枫€?/li>
- 鐪嬪埌 due care锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓
- 闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細搴旀湁璋ㄦ厧涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 due care锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛欴ue is not related to:鈥滃簲鏈夆€濅笌浠ヤ笅鍝」涓嶇浉鍏?
- 棰樺簱锛歍he continual effort of making sure that the correct policies, procedures and standards are in place and being followed is described as what?涓嶆柇鍔姏纭繚鏈変笖...
- 棰樺簱锛歐hen an organization takes reasonable measures to ensure that it took precautions to protect its network and resources is called缁勭粐閲囧彇鍚堢悊鎺柦锛屼互纭繚瀹冮噰鍙栭闃叉帾鏂芥潵淇?..
- 棰樺簱锛欽ared plays a role in his company鈥檚 data classification system. In this role, he must practice due care when accessing data and ensure that the data...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M044 Security Governance / 瀹夊叏娌荤悊
- 浼樺厛绾э細P1 鍏堝仛鎴愬畬鏁磋蹇嗗崱銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佸鏄撴贩娣嗐€佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歋ecurity Governance銆佸畨鍏ㄦ不鐞嗐€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?5锛涜ˉ鍏呰祫鏂?5锛涢搴撳弽鎺?2锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?2銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 5 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 2 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎯宠薄鍏徃涓嶆槸鍙拱鍑犲彴闃茬伀澧欙紝鑰屾槸鍏堝喅瀹氬畨鍏ㄥ埌搴曡皝璐熻矗銆侀挶鑺卞湪鍝噷銆佸嚭浜嗕簨璋佹壒鍑嗗鐞嗐€傚畨鍏ㄦ不鐞嗗氨鏄妸杩欎簺璐ｄ换銆佽鍒欍€佺洃鐫ｆ柟寮忓啓娓呮銆傚畠鍥炵瓟鐨勬槸鍏徃灞傞潰鐨勨€滆皝鎷嶆澘銆佽皝璐熻矗銆佹€庝箞妫€鏌モ€濓紝涓嶆槸鏌愪釜宸ョ▼甯堜粖澶╄浠€涔堝伐鍏枫€?/li>
- 鎯宠薄灏忔灄鐨勫叕鍙告湁瀹樼綉銆佸憳宸ュ唴缃戙€佸姙鍏銆佹満鎴垮拰鍥尯鍥存爮銆傚鎴蜂粠 Internet 璁块棶瀹樼綉锛屽憳宸ュ湪鍔炲叕瀹ゅ鐞嗚鍗曪紝鏈嶅姟鍣ㄦ斁鍦ㄦ満鎴块噷銆?鐜板湪闂鏉ヤ簡锛氬叕鍙稿埌搴曡淇濇姢鍒板摢閲岋紵鏄繚鎶ょ綉绔欏叆鍙ｏ紝杩樻槸淇濇姢鍐呯綉锛岃繕鏄繚鎶ゅ姙鍏澶ч棬鍜屾満鎴块棬绂侊紵 杩欏氨鏄?security perimeter 鎴?security boundary 瑕佸洖绛旂殑闂銆傛崲鍙ヨ瘽璇达細鍏堢敾鍑轰竴鏉＄嚎锛岀嚎...
鑰冮淇″彿锛?/p>
- 棰樼洰鍑虹幇 governance銆乻enior management銆乸olicy銆乷versight銆乤ccountability 鏃讹紝鍏堟兂鍒伴珮灞傝矗浠诲拰绠＄悊鐩戠潱銆備笉瑕佺洿鎺ヨ烦鍒伴槻鐏銆佹壂鎻忓櫒鎴栨煇涓妧鏈厤缃€?/li>
- 棰樼洰鍑虹幇 governance銆乻enior management銆乸olicy銆乷versight銆乤ccountability 鏃讹紝鍏堟兂鍒伴珮灞傝矗浠诲拰绠＄悊鐩戠潱
- 涓嶈鐩存帴璺冲埌闃茬伀澧欍€佹壂鎻忓櫒鎴栨煇涓妧鏈厤缃?/li>
- 鍏堢湅棰樼洰鏄湪闂竟鐣屽湪鍝噷銆佹帶鍒跺€间笉鍊煎緱锛岃繕鏄皝浠庨珮灞傜洃鐫ｅ畨鍏?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎯宠薄鍏徃涓嶆槸鍙拱鍑犲彴闃茬伀澧欙紝鑰屾槸鍏堝喅瀹氬畨鍏ㄥ埌搴曡皝璐熻矗銆侀挶鑺卞湪鍝噷銆佸嚭浜嗕簨璋佹壒鍑嗗鐞嗐€傚畨鍏ㄦ不鐞嗗氨鏄妸杩欎簺璐ｄ换銆佽鍒欍€佺洃鐫ｆ柟寮忓啓娓呮銆傚畠鍥炵瓟鐨勬槸鍏徃灞傞潰鐨勨€滆皝鎷嶆澘銆佽皝璐熻矗銆佹€庝箞妫€鏌モ€濓紝涓嶆槸鏌愪釜宸ョ▼甯堜粖澶╄浠€涔堝伐鍏枫€?/li>
- 瀛︿範鍗曞厓锛氬畨鍏ㄨ竟鐣屼笌娌荤悊寮€澶达細鍏堝垝娓呭摢閲屽綊鍏徃璐熻矗 - 瀹夊叏杈圭晫鍛婅瘔鍏徃瀵瑰摢浜涚綉缁溿€佺郴缁熷拰鍦哄湴璐熻矗锛涜法杈圭晫瑕佹湁鎺у埗鍜岃绀猴紝鎺у埗鎴愭湰杩樿鍜岃淇濇姢瀵硅薄鐨勪环鍊肩浉绉帮紱娌荤悊鎶婂畨鍏ㄨ矗浠绘彁鍗囧埌钁ｄ簨浼氭垨楂樼灞傞潰銆?/li>
- 瀛︿範鍗曞厓锛氬畨鍏ㄨ鍒掕鎸佺画浣跨敤锛氬苟璐€佸墺绂诲拰瑁佹挙鏃堕闄╀細鍗囬珮 - 瀹夊叏鏄寔缁繃绋嬶紝璁″垝瑕佸叿浣撱€佹竻妤氥€佽缁存姢骞剁湡姝ｄ娇鐢紱娌荤悊瑕佽鐩栧苟璐€佸墺绂诲拰娌荤悊濮斿憳浼氱瓑缁勭粐娴佺▼锛屽洜涓鸿浆鍨嬫湡瀹规槗鍑虹幇娉勯湶銆佷涪鏁版嵁銆佸仠鏈哄拰 ROI 涓嶈冻銆?/li>
- 瀛︿範鍗曞厓锛氱鑱屾敹灏俱€佹敹璐垚鏈笌绗笁鏂硅瘎浼?- 绂昏亴鏃惰澶嶆煡 NDA 鍜屼粛鐒舵湁鏁堢殑鍗忚锛涙敹璐‖浠躲€佽蒋浠躲€佹湇鍔℃垨渚涘簲鍟嗘椂锛岃鎶婂畨鍏ㄧ己闄风殑闀挎湡淇ˉ鎴愭湰绠楄繘 TCO锛屽苟鐢ㄧ幇鍦鸿瘎浼般€佹枃妗ｄ氦鎹㈠拰鎸佺画鐩戞帶妫€鏌ョ涓夋柟銆?/li>
- 瀛︿範鍗曞厓锛氫汉鍛樺畨鍏細鍏ヨ亴銆佸湪鑱屻€佺鑱?- 鍛樺伐銆佸鍖呬汉鍛樺拰璁垮鍦ㄨ繘鍏ュ叕鍙搞€佷娇鐢ㄧ郴缁熴€佺寮€鍏徃鏃讹紝鏉冮檺鍜岃矗浠绘€庝箞澶勭悊銆?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 4 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎸囧崡涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 guideline锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍏徃鎯宠瀹氭墍鏈夌郴缁熸€庝箞瀹夊叏閰嶇疆銆傚鏋滃彧鍐欎竴鍙モ€滅郴缁熻瀹夊叏鈥濓紝宸ョ▼甯堜笉鐭ラ亾鍏蜂綋鎬庝箞鍋氥€?鍥犱负涓嶅悓鏂囨。鍥炵瓟涓嶅悓灞傛鐨勯棶棰橈紝鎵€浠ヨ鎶?policy銆乻tandard銆乥aseline銆乬uideline 鍒嗗紑銆?Organizational security policy 绠℃暣涓粍缁囷紱issue-specific policy 绠℃煇涓綉缁滄湇鍔°€侀儴闂ㄦ垨鍔熻兘锛泂...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 guideline锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓銆?闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗椼€?闂?first/best锛岄€氬父鍏堝畾鑼冨洿銆佽矗浠汇€佺鐞嗘敮鎸佹垨椋庨櫓璇勪及锛屽啀閫夊伐鍏枫€?/li>
- 鐪嬪埌 guideline锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓
- 闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎸囧崡涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 guideline锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氭斂绛栥€佹爣鍑嗐€佸熀绾垮拰鎸囧崡锛氫粠澶ф柟鍚戝埌鍏蜂綋瑕佹眰 - 缁勭粐鏀跨瓥绠″叏鍏徃锛屼笓椤规斂绛栫鐗瑰畾鏈嶅姟鎴栭儴闂紝绯荤粺鏀跨瓥绠″叿浣撶郴缁燂紱鏍囧噯鏄己鍒剁粺涓€瑕佹眰锛屽熀绾挎槸鏈€浣庡畨鍏ㄦ按骞筹紝鎸囧崡鏄伒娲诲缓璁€?/li>
- 棰樺簱锛歐hich of the following would be the BEST guideline to follow when attempting to avoid the exposure of sensitive data?鍦ㄨ瘯鍥鹃伩鍏嶆毚闇叉晱鎰熸暟鎹椂锛屽簲閬靛惊浠ヤ笅鍝潯鏈€浣冲噯鍒欙紵
- 棰樺簱锛歐hat is the MOST appropriate hierarchy of documents when implementing a security program?瀹炴柦瀹夊叏璁″垝鏃讹紝鏈€鍚堥€傜殑鏂囨。灞傛缁撴瀯鏄粈涔堬紵
- 棰樺簱锛欽im寮€濮嬩簡涓€涓郴缁熷伐绋嬪笀鐨勬柊宸ヤ綔锛屼粬鐨勮€佹澘鍚戜粬鎻愪緵浜嗕竴浠介涓恒€婂彇璇佸搷搴旀寚鍗椼€嬬殑鏂囦欢銆備笅鍒楀摢涓€涓檲杩版槸涓嶆纭殑锛?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M047 PASTA
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歅ASTA銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?2锛涢搴撳弽鎺?3锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?3銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 2 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 3 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- PASTA涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 PASTA锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍥㈤槦閫夋嫨 PASTA 鍚庯紝闇€瑕佷竴姝ユ璧板畬鐩爣銆佽寖鍥淬€佸垎瑙ｃ€佸▉鑳併€佹紡娲炪€佹敾鍑绘ā鎷熷拰椋庨櫓绠＄悊銆?鍥犱负姣忎竴闃舵閮芥湁浜や粯鐗╋紝鎵€浠?PASTA 涓嶆槸闅忓彛璁ㄨ濞佽儊锛岃€屾槸鍒嗛樁娈垫帹杩涖€?PASTA 闃舵鍖呮嫭 DO銆丏TS銆丄DA銆乀A銆乄VA銆丄MS銆丷AM銆傛崲鍙ヨ瘽璇达細鍏堟槑纭洰鏍囧拰鎶€鏈寖鍥达紝鍐嶅垎瑙ｅ簲鐢ㄣ€佸垎鏋愬▉鑳佸拰婕忔礊锛屾渶鍚庡仛鏀诲嚮妯℃嫙涓庨闄╃鐞嗐€?VAST 鎶?thre...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 PASTA锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 PASTA锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鍏堢湅棰樼洰鏄湪闂柟娉曢樁娈点€丄gile 闆嗘垚锛岃繕鏄▉鑳佹潵婧?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細PASTA涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 PASTA锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛歅ASTA 闃舵銆乂AST銆佷釜浜哄▉鑳佷笌鏀诲嚮鍥?- PASTA 鍒嗕竷闃舵鎺ㄨ繘锛沄AST 鎶婂▉鑳佸拰椋庨櫓绠＄悊鏀惧叆 Agile锛涗釜浜恒€佹壙鍖呭晢銆佸憳宸ュ拰浼欎即鍏崇郴鎭跺寲涔熷彲鑳芥垚涓哄▉鑳侊紱涓嬩竴姝ヨ鐢诲浘鍒嗘瀽鏀诲嚮銆?/li>
- 瀛︿範鍗曞厓锛氬涔犻锛氱涓夋柟鏈€浣庤姹傘€丳ASTA 鍜岀郴缁熷垎瑙?- 杩欎竴娈电粌涔犵涓夋柟鏈€浣庡畨鍏ㄨ姹傚簲鍩轰簬鐜版湁瀹夊叏鏀跨瓥锛涢闄╀腑蹇冨▉鑳佸缓妯℃槸 PASTA锛涘垎瑙ｇ郴缁熻鎵句俊浠昏竟鐣屻€佹暟鎹祦銆佽緭鍏ョ偣鍜岀壒鏉冩搷浣溿€?/li>
- 棰樺簱锛歐hat should be used to determine the risks associated with using Software as a Service (SaaS) for collaboration and email?搴斾娇鐢ㄤ粈涔堟潵纭畾灏嗚蒋浠跺嵆鏈嶅姟(SaaS)鐢ㄤ簬鍗忎綔鍜岀數瀛?..
- 棰樺簱锛歐hat is the threat modeling order using process for Attack simulation and threat analysis (PASTA)? 浣跨敤鏀诲嚮妯℃嫙鍜屽▉鑳佸垎鏋?PASTA)娴佺▼鐨勫▉鑳佸缓妯￠『搴忔槸浠€涔堬紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M048 Strategic Plan / 鎴樼暐璁″垝
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€侀搴撻珮棰戙€?/li>
- 鍒悕/棰樼溂锛歋trategic Plan銆佹垬鐣ヨ鍒掋€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?5锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?5銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 5 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎴樼暐璁″垝涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Strategic Plan锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Strategic Plan锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 Strategic Plan锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 棰樼洰闂?tactical security plans 鏈€閫傚悎鍋氫粈涔堬紝灏遍€?Deploy new security technology銆?鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€淲hat are tactical security plans BEST used for? 鎴樻湳瀹夊叏璁″垝鏈€閫傚悎鐢ㄦ潵鍋氫粈涔堬紵鈥濄€?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎴樼暐璁″垝涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Strategic Plan锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛歐hat are tactical security plans BEST used for? 鎴樻湳瀹夊叏璁″垝鏈€閫傚悎鐢ㄦ潵鍋氫粈涔堬紵
- 棰樺簱锛歐hen MUST an organization's information security strategic plan be reviewed?浣曟椂蹇呴』瀹℃煡缁勭粐鐨勪俊鎭畨鍏ㄦ垬鐣ヨ鍒掞紵
- 棰樺簱锛歊enee姝ｅ湪涓哄ス鐨勭粍缁囪璁￠暱鏈熷畨鍏ㄨ鍒掞紝鑰屼笖宸茬粡璁捐浜嗕竴涓笁鑷充簲骞寸殑璁″垝灞曟湜銆傚ス鐨勪富瑕佺洰鏍囨槸浣垮畨鍏ㄥ姛鑳戒笌鏇村箍娉涚殑涓氬姟璁″垝鍜岀洰鏍囦繚鎸佷竴鑷淬€傚ス姝ｅ湪鍒跺畾浠€涔堢被鍨嬬殑璁″垝锛烺enee is designing the long-term security plan for her organization...
- 棰樺簱锛欰n organization's information security strategic plan MUST be reviewed 蹇呴』瀹℃煡缁勭粐鐨勪俊鎭畨鍏ㄦ垬鐣ヨ鍒?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M049 Abstraction / 鎶借薄
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛欰bstraction銆佹娊璞°€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?3锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?3銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 3 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎶借薄涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Abstraction锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍏徃鐨勬櫘閫氬簲鐢ㄩ渶瑕佽鍙栦竴娈电鐞嗗憳绾ф暟鎹紝浣嗕粬涓嶆兂璁╂櫘閫氬簲鐢ㄧ洿鎺ョ绠＄悊鍛樺尯鍩熴€?浜庢槸搴旂敤鍙兘閫氳繃 system calls 璇锋眰 administrator-mode 鏈嶅姟銆傜郴缁熷啀鏍规嵁璇锋眰鑰呯殑 credentials 鍜?permissions 鍐冲畾鍑嗕笉鍑嗐€?杩欏氨鏄?abstraction 鍦ㄥ畨鍏ㄩ噷鐨勪竴涓牱瀛愩€傛崲鍙ヨ瘽璇达細涓讳綋涓嶇洿鎺ョ搴曞眰瀵硅薄锛岃€屾槸閫氳繃鍙楁帶...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Abstraction锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 Abstraction锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鍏堢湅棰樼洰鏄湪闂€氳繃涓粙璁块棶锛岃繕鏄湪闂妸鏁版嵁鏀惧埌涓讳綋鐪嬩笉瑙併€佽闂笉鍒扮殑浣嶇疆
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎶借薄涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Abstraction锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氭娊璞′笌鏁版嵁闅愯棌锛氶€氳繃涓粙璁块棶銆佸垎缁勬巿鏉冨拰瀹夊叏瀹瑰櫒鍑忓皯鏆撮湶 - 鎶借薄璁╁簲鐢ㄩ€氳繃 system calls 璇锋眰鏈嶅姟锛屼篃璁╃鐞嗗憳缁欏璞＄粍鍒嗛厤鏉冮檺锛涙暟鎹殣钘忔妸瀵硅薄鏀捐繘涓讳綋鐪嬩笉瑙併€佽闂笉鍒扮殑閫昏緫闅旈棿锛屼笉绛変簬鍗曠函钘忕潃涓嶈銆?/li>
- 棰樺簱锛歐hat are the three key benefits that application developers should derive from the northbound application programming interface (API) of software def...
- 棰樺簱锛氫互涓嬪摢涓€椤规妧鏈彁渚涗簡涓€涓姛鑳芥帴鍙ｏ紝鍏佽寮€鍙戣€呭湪涓嶇煡閬撶郴缁熷疄鐜扮粏鑺傜殑鎯呭喌涓嬬洿鎺ヤ笌绯荤粺浜や簰锛?/li>
- 棰樺簱锛氱‖浠舵娊璞″眰 (HAL) 鍦紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M050 SABSA
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹硶寰?鍚堣銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歋ABSA銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?4锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?4銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 4 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- SABSA涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 SABSA锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍏徃涓€杈硅閰嶇疆鏈嶅姟鍣紝涓€杈硅璁?IT 瀹夊叏鏀寔涓氬姟鐩爣锛岃繕瑕佽璁￠暱鏈熷畨鍏ㄦ灦鏋勩€?鍥犱负杩欎笁涓棶棰樺眰娆′笉鍚岋紝鎵€浠ヤ笉鑳芥妸 CIS銆丆OBIT 鍜?SABSA 褰撴垚鍚屼竴涓笢瑗裤€?CIS 鎻愪緵 OS銆乤pplication 鍜?hardware security configuration guides銆傛崲鍙ヨ瘽璇达細瀹冩洿鍍忓叿浣撻厤缃熀鍑嗭紝甯稿拰鎺у埗妗嗘灦閰嶅悎浣跨敤锛屼絾鏈...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 SABSA锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊銆?鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋勩€?鐪嬪埌 PCI DSS 鎯虫敮浠樺崱銆?鐪嬪埌 FedRAMP 鎯宠仈閭︿簯銆?鐪嬪埌 ISO/NIST/ITIL 鍒嗗埆鐪嬬鐞嗕綋绯汇€佹寚鍗楀拰鏈嶅姟绠＄悊銆?/li>
- 鐪嬪埌 SABSA锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊
- 鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細SABSA涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 SABSA锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛欳IS銆丆OBIT 涓?SABSA锛氶厤缃熀绾裤€両T 娌荤悊鍜屼笟鍔″畨鍏ㄦ灦鏋?- CIS Benchmarks 甯稿拰鎺у埗妗嗘灦閰嶅悎浣跨敤锛汣OBIT 鎶?IT 瀹夊叏鐩爣鏄犲皠鍒颁笟鍔＄洰鏍囷紱SABSA 鐢ㄩ闄╅┍鍔ㄦ柟寮忚璁′紒涓氬畨鍏ㄦ灦鏋勩€?/li>
- 棰樺簱锛氳兘鍔涙垚鐔熷害妯″瀷闆嗘垚(CMMI)鏂规硶鍦ㄥ畨鍏ㄧ▼搴忓拰浼佷笟鍙戝睍涓棰戠箒浣跨敤銆備互涓嬪摢涓€椤逛笉鏄妯″瀷鐨勭壒鎬?
- 棰樺簱锛氫互涓嬪摢涓槸浼佷笟瀹夊叏妗嗘灦锛?Which of the following is an enterprise security framework?
- 棰樺簱锛欻enry's organization wants to meet federal security standards for the cloud services it provides. What program should he investigate to meet this goa...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M051 containment / 閬忓埗
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歝ontainment銆侀亸鍒躲€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?4锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?4銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 4 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 閬忓埗涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 containment锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 containment锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 containment锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- This behavior is ethical because the tool is used to create better virus scanning software in a controlled environment. 鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€滃摢涓€涓渶鑳芥弿杩板伐绋嬪笀鐨勮涓猴紝涓轰粈涔堬紵鈥濄€?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細閬忓埗涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 containment锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛氫竴瀹惰蒋浠跺叕鍙哥殑宸ョ▼甯堝垱閫犱簡涓€涓梾姣掑垱閫犲伐鍏枫€傝宸ュ叿鍙骇鐢熸暟鍗冪澶氭€佺梾姣掋€傚伐绋嬪笀璁″垝鍦ㄥ彈鎺х幆澧冧腑浣跨敤璇ュ伐鍏锋潵娴嬭瘯璇ュ叕鍙哥殑涓嬩竴浠ｇ梾姣掓壂鎻忚蒋浠躲€傚摢涓€涓渶鑳芥弿杩板伐绋嬪笀鐨勮涓猴紝涓轰粈涔堬紵
- 棰樺簱锛氬綋璇曞浘浜嗚В鏈煡搴旂敤绋嬪簭鐨勭洰鐨勬椂锛屾硶鍖诲垎鏋愪腑鏈€閲嶈鐨勬楠ゆ槸浠€涔堬紵
- 棰樺簱锛氬叕鍙稿唴缃戠殑鏈嶅姟鍣ㄨ鏀荤牬鍚庯紝鏈€濂界殑闃插尽鎺柦锛?/li>
- 棰樺簱锛氫簨鏁呭搷搴旇繃绋嬫纭殑椤哄簭鏄紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M052 DREAD
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛欴READ銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?2锛涢搴撳弽鎺?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?1銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 2 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 1 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- DREAD涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 DREAD锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍥㈤槦鎯虫瘮杈冧袱涓▉鑳佸摢涓洿涓ラ噸銆傚彧璇粹€滃緢鍗遍櫓鈥濆お妯＄硦锛屾墍浠ヤ粬浠敤涓€缁勯棶棰樻潵鎵撳垎銆?鍥犱负濞佽儊涓ラ噸搴︿笉鍙湅浼ゅ锛岃繕瑕佺湅鏀诲嚮鏄惁瀹规槗閲嶅銆佹槸鍚﹀鏄撴墽琛岋紝鎵€浠?DREAD 鎶婇棶棰樻媶寮€銆?DREAD 鏄?Damage銆丷eproducibility銆丒xploitability銆丄ffected Users銆丏iscoverability銆傛崲鍙ヨ瘽璇达細瀹冧粠浜斾釜瑙掑害璇?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 DREAD锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 DREAD锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鍏堢湅棰樼洰闂殑鏄?DREAD 鐨勫摢涓棶棰?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細DREAD涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 DREAD锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛欴READ 涓婂崐锛氱敤浜斾釜闂缁欏▉鑳佹墦鍒?- DREAD 鐢?Damage銆丷eproducibility銆丒xploitability銆丄ffected Users銆丏iscoverability 浜斾釜闂琛￠噺濞佽儊锛涙湰娈靛厛瑙ｉ噴浼ゅ銆佸鐜伴毦搴﹀拰鍒╃敤闅惧害銆?/li>
- 瀛︿範鍗曞厓锛氫簯涓庡叡浜矗浠?- 涓婁簯浠ュ悗锛屼簯鍟嗚礋璐ｄ粈涔堬紝鍏徃鑷繁杩樿璐熻矗浠€涔堛€?/li>
- 棰樺簱锛氬簲鐢ㄧ▼搴忓▉鑳佸缓妯′腑浣跨敤浠€涔堢被鍨嬪浘琛ㄦ潵鎻忚堪鎭舵剰鐢ㄦ埛銆佺紦瑙ｅ拰濞佽儊绛夛紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M053 Data Hiding / 鏁版嵁闅愯棌
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛欴ata Hiding銆佹暟鎹殣钘忋€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?3锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?3銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 3 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鏁版嵁闅愯棌涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Data Hiding锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Data Hiding锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 Data Hiding锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 绛旀蹇呴』姝ｉ潰鍥炵瓟棰樺共鏈€鍚庝竴鍙ワ紱鍙鍚屼竴绔犲彟涓€涓煡璇嗙偣鐨勮В閲婁笉鍚堟牸銆?鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€滀粈涔堟妧鏈‘淇濇搷浣滅郴缁熻兘缁欑郴缁熶笂姣忎釜搴旂敤绋嬪簭鍒嗛厤鍗曠嫭浣跨敤鐨勫瓨鍌ㄧ┖闂达紵鈥濄€?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鏁版嵁闅愯棌涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Data Hiding锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛氫粈涔堟妧鏈‘淇濇搷浣滅郴缁熻兘缁欑郴缁熶笂姣忎釜搴旂敤绋嬪簭鍒嗛厤鍗曠嫭浣跨敤鐨勫瓨鍌ㄧ┖闂达紵
- 棰樺簱锛氫粈涔堣繘绋嬩负OSI妯″瀷鐨勬瘡涓€灞傛帴鏀跺埌鐨勬暟鎹坊鍔犱竴涓ご鍜屽熬锛?/li>
- 棰樺簱锛氳繘琛岀郴缁熸暟鎹殣绉佷繚鎶ょ涓€姝ワ紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M055 Tactical Plan / 鎴樻湳璁″垝
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歍actical Plan銆佹垬鏈鍒掋€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔犻 2锛涢搴撳弽鎺?1锛涘畼鏂圭粌涔?2锛涢搴撳懡涓?1銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 瀹樻柟缁冧範纰板埌 2 娆★紝璇存槑瀹冧細琚鐩敼鍐欐垚鍦烘櫙銆?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 1 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鎴樻湳璁″垝涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Tactical Plan锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Tactical Plan锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 Tactical Plan锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鎴樻湳璁″垝涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Tactical Plan锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀹樻柟棰橈細钑惧Ξ姝ｅ湪涓哄叾缁勭粐璁捐涓€椤归暱鏈熷畨鍏ㄨ鍒掞紝瑙勫垝鍛ㄦ湡涓?3 鍒?5 骞淬€傚ス鐨勪富瑕佺洰鏍囨槸浣垮畨鍏ㄨ亴鑳戒笌浼佷笟鏇村箍娉涚殑璁″垝鍜岀洰鏍囦繚鎸佷竴鑷淬€傚ス姝ｅ湪鍒跺畾鐨勬槸鍝绫诲瀷鐨勮鍒掞紵
- 瀹樻柟棰橈細D. 鎴樼暐璁″垝鐨勯暱鏈熻鍒掑懆鏈熼€氬父闀胯揪浜斿勾銆傚叾鐩殑鏄娇瀹夊叏鑱岃兘涓庝笟鍔＄洰鏍囧湪鎴樼暐涓婁繚鎸佷竴鑷淬€傝繍钀ュ拰鎴樻湳璁″垝鐨勫懆鏈熻緝鐭紝涓轰竴骞存垨鏇寸煭銆?/li>
- 棰樺簱锛歐hat are tactical security plans BEST used for? 鎴樻湳瀹夊叏璁″垝鏈€閫傚悎鐢ㄦ潵鍋氫粈涔堬紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M056 Operational Plan / 杩愯惀璁″垝
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歄perational Plan銆佽繍钀ヨ鍒掋€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?1銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 1 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 杩愯惀璁″垝涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Operational Plan锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄澶嶄範鏃跺鏄撴妸 business case銆佷笁绫昏鍒掋€佹斂绛栫粨鏋勩€乨ue care 鍜?SCRM 娣峰湪涓€璧枫€?鍥犱负杩欎簺閮藉睘浜庣鐞嗛锛屼絾鍥炵瓟鐨勯棶棰樹笉鍚岋紝鎵€浠ヨ鎸夐骞叉渶鍚庨棶浠€涔堟媶寮€銆?Security management planning 鎶婂畨鍏ㄨ亴鑳藉榻?strategy銆乬oals銆乵ission銆乷bjectives銆傛崲鍙ヨ瘽璇达細瀹夊叏璁″垝瑕佹湇鍔′笟鍔＄洰鏍囧拰璧?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Operational Plan锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 Operational Plan锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鍏堢湅棰樼洰鏄湪闂璇侀」鐩€佽鍒掓椂闂村昂搴︺€佹枃妗ｃ€佽皑鎱庛€佸▉鑳佽繕鏄緵搴旈摼
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細杩愯惀璁″垝涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Operational Plan锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氬涔犺鐐癸細涓氬姟妗堜緥銆佷笁绫昏鍒掋€佹枃妗ｇ粨鏋勩€佽皑鎱庛€佸▉鑳佸缓妯″拰 SCRM - 杩欎竴娈靛涔犲畨鍏ㄨ鍒掑浣曞榻愪笟鍔★紝business case 涓轰粈涔堝瓨鍦紝涓夌被璁″垝鎬庝箞鍒嗭紝鏂囨。灞傜骇鎬庝箞鍒嗭紝due diligence/due care銆佸▉鑳佸缓妯″拰 SCRM 鎬庝箞鍒ゆ柇銆?/li>
- 棰樺簱锛歐hich plan focuses on sustaining an organization's business functions during and after a disruption? 鍝璁″垝鍏虫敞鍦ㄤ腑鏂湡闂村拰涓柇涔嬪悗缁存寔缁勭粐鐨勪笟鍔″姛鑳斤紵
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M058 threat hunting / 濞佽儊鐙╃寧
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氱缉鍐?鑻辨枃棰樼溂銆?/li>
- 鍒悕/棰樼溂锛歵hreat hunting銆佸▉鑳佺嫨鐚庛€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涢搴撳弽鎺?2锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?2銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 2 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 濞佽儊鐙╃寧涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 threat hunting锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 灏忔灄鍋氬埌 STRIDE 棰橈細confidential documents exposed to unauthorized entities銆?鍥犱负杩欐槸鏈哄瘑鏂囦欢琚湭鎺堟潈瀹炰綋鐪嬪埌锛屾墍浠ュ湪 STRIDE 閲屼笉鏄?spoofing锛屼篃涓嶆槸 tampering锛岃€屾槸 Information disclosure銆?Information disclosure 鐨勫瓧姣?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 threat hunting锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼般€?闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼般€?闂?simulate attacker/exploit 鐪嬫笚閫忔祴璇曘€?闂?evidence/control review...
- 鐪嬪埌 threat hunting锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滈闄┿€佽瘎浼颁笌瀹¤鈥濆垽鏂細闂?impact/likelihood/asset value 鐪嬮闄╄瘎浼?/li>
- 闂?known weakness/missing patch 鐪嬫紡娲炶瘎浼?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細濞佽儊鐙╃寧涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夋敮浠樼郴缁熴€佸鎴锋暟鎹簱銆佸憳宸ュ悗鍙板拰渚涘簲鍟嗘帴鍙ｃ€傝€佹澘鍏冲績鍝釜鍧忎簡鏈€鐥涳紝宸ョ▼甯堝叧蹇冨摢閲屾病鎵撹ˉ涓侊紝瀹夊叏鍥㈤槦鍏冲績鑳戒笉鑳界湡鐨勮繘鍚庡彴锛屽璁″憳鍏冲績鏈夋病鏈夊鎵广€佹棩蹇楀拰璇佹嵁銆?姣斿锛氶闄╄瘎浼版敮鎸佺鐞嗗喅绛栥€?鎵€浠ヨ€冭瘯鐪嬪埌 threat hunting锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜?..
- 瀛︿範鍗曞厓锛氬涔犻锛氭斂绛栨枃妗ｃ€丼TRIDE 淇℃伅娉勯湶鍜屼富鍔ㄥ▉鑳佸缓妯?- 杩欎竴娈电粌涔犳枃妗ｅ尮閰嶃€丼TRIDE 涓俊鎭硠闇插搴?I锛屼互鍙婂紑鍙戞棭鏈熷垎鏋愭紡娲炲▉鑳侀闄╁睘浜?proactive threat modeling銆?/li>
- 棰樺簱锛歅atrick璐熻矗涓哄叾缁勭粐瀹炴柦濞佽儊杩借釜璁″垝銆備互涓嬪摢椤规槸浠栧湪璁″垝宸ヤ綔鏃跺簲璇ヤ娇鐢ㄧ殑濞佽儊杩借釜璁″垝鐨勫熀鏈亣璁撅紵Patrick was charged with implementing a threat hunting program for his organization. Which one of...
- 棰樺簱锛欴arren姝ｅ湪杩涜濞佽儊鐙╃寧璁粌锛屽苟甯屾湜瀵绘壘鍍靛案缃戠粶鍏ヤ镜鐨勮抗璞°€備互涓嬪摢浜涙槸鏀诲嚮鑰呭埄鐢ㄥ兊灏哥綉缁滅殑甯歌鏂瑰紡锛?閫夋嫨鎵€鏈夐€傜敤鐨勯€夐」锛塂arren is conducting a threat hunting exercise and would like to look for botnet indic...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M059 Layering / 鍒嗗眰
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歀ayering銆佸垎灞傘€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涜ˉ鍏呰祫鏂?1锛涢搴撳弽鎺?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?1銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 1 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鍒嗗眰涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Layering锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Layering锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 Layering锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- Choose Process isolation, with an answer-disputed note. 鍋氶鏃跺彧闂竴浠朵簨锛氬摢涓€夐」鑳借В閲娾€淲hich of the following is the PRIMARY mechanism used to limit the range of objects available to a given su...
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鍒嗗眰涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 Layering锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 琛ュ厖璧勬枡锛?.2.5 淇濇姢鏈哄埗 - CISSP 瀹樻柟瀛︿範鎵嬪唽锛堢 9 鐗堬級 浠殑琛屼负璐熻矗鏃讹紝鎵嶈兘淇濇寔瀹夊叏鎬с€傛湁鏁堢殑闂矗鍒朵緷璧栧崈妫€楠屼富浣撹韩浠藉強杩借釜鍏舵椿鍔ㄧ殑鑳藉姏銆?閫氳繃瀹夊叏鏈嶅姟鍜屽璁°€佽韩浠借璇併€佹巿鏉冨拰韬唤鏍囪瘑绛夋満鍒讹紝灏嗕汉鍛樹笌鍦ㄧ嚎韬唤鐨勬椿鍔ㄨ仈绯昏捣 鏉ワ紝杩涜€屽缓绔嬮棶璐ｅ埗銆傚洜姝わ紝浜哄憳鐨勯棶璐ｅ埗鏈€缁堝彇鍐冲崈韬唤...
- 棰樺簱锛歐hich of the following is the PRIMARY mechanism used to limit the range of objects available to a given subject within different execution domains? 浠?..
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M060 security control frameworks / 瀹夊叏鎺у埗妗嗘灦
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹硶寰?鍚堣銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歴ecurity control frameworks銆佸畨鍏ㄦ帶鍒舵鏋躲€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涜ˉ鍏呰祫鏂?1锛涢搴撳弽鎺?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?1銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 1 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- 瀹夊叏鎺у埗妗嗘灦涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 security control frameworks锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 鏍囬锛氥€婁汉鍛樺畨鍏細鍏ヨ亴銆佸湪鑱屻€佺鑱屻€?杩欓〉鍦ㄨ浠€涔堬細 杩欓〉鍦ㄨ锛氬憳宸ャ€佸鍖呬汉鍛樺拰璁垮鍦ㄨ繘鍏ュ叕鍙搞€佷娇鐢ㄧ郴缁熴€佺寮€鍏徃鏃讹紝鏉冮檺鍜岃矗浠绘€庝箞澶勭悊銆?鐜板疄閲屾€庝箞鍙戠敓锛?鍋囪鍏徃鎷涜仒瀹㈡湇銆佸紑鍙戜汉鍛樺拰绯荤粺绠＄悊鍛樸€傚叆鑱屽墠瑕佸仛鑳屾櫙璋冩煡锛岀湅宀椾綅鏄惁閫傚悎锛涘湪鑱屾椂瑕佸煿璁€佺缃蹭繚瀵嗗崗璁€佹寜宀椾綅缁欐潈闄愶紱绂昏亴鏃惰鏀跺洖闂ㄧ鍗°€佽澶囥€佽处鍙枫€佷护鐗屽拰瀵嗛挜锛岄伩鍏嶇鑱屼汉鍛樼户缁闂郴缁熸垨甯﹁蛋璧勬枡銆?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 security control frameworks锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊銆?鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋勩€?鐪嬪埌 PCI DSS 鎯虫敮浠樺崱銆?鐪嬪埌 FedRAMP 鎯宠仈閭︿簯銆?鐪嬪埌 ISO/NIST/ITIL 鍒嗗埆鐪嬬鐞嗕綋绯汇€佹寚鍗楀拰鏈嶅姟绠＄悊銆?/li>
- 鐪嬪埌 security control frameworks锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊
- 鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細瀹夊叏鎺у埗妗嗘灦涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 security control frameworks锛屽厛闂畠鏄湪瑙ｅ喅...
- 瀛︿範鍗曞厓锛氫汉鍛樺畨鍏細鍏ヨ亴銆佸湪鑱屻€佺鑱?- 鍛樺伐銆佸鍖呬汉鍛樺拰璁垮鍦ㄨ繘鍏ュ叕鍙搞€佷娇鐢ㄧ郴缁熴€佺寮€鍏徃鏃讹紝鏉冮檺鍜岃矗浠绘€庝箞澶勭悊銆?/li>
- 琛ュ厖璧勬枡锛氱1绔?瀹炵幇瀹夊叏娌荤悊鐨勫師鍒欏拰绛栫暐 - 宸咃伎锛匡伎 姹颁汉== 鑺績涓€蹇冦€佸績===-==绔嬶季锛?涓€ =銆?==== 锛匡伎銆佽姱杩橀厤 瀹炵幇瀹夊叏娌荤悊鐨勫師鍒欏拰绛栫暐 鏈珷娑电洊鐨?CISSP 璁よ瘉鑰冭瘯涓婚鍖呮嫭锛?鉁?鍩?1 瀹夊叏涓庨闄╃鐞?鈥?1.2 鐞嗚В鍜屽簲鐢ㄥ畨鍏ㄦ蹇?鈥?1.2.1 淇濆瘑鎬с€佸畬鏁存€с€佸彲鐢ㄦ€с€佺湡...
- 棰樺簱锛歊obert璐熻矗淇濇姢澶勭悊淇＄敤鍗′俊鎭殑绯荤粺瀹夊叏銆備互涓嬪摢涓畨鍏ㄦ帶鍒舵鏋跺彲浠ユ寚瀵间粬鐨勮鍔紵Robert is responsible for securing systems used to process credit card information. What security control f...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M062 business strategy / 涓氬姟鎴樼暐瀵归綈
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛歜usiness strategy銆佷笟鍔℃垬鐣ュ榻愩€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
灏忕櫧鍏堢湅锛?/p>
- 涓氬姟鎴樼暐瀵归綈涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 business strategy锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 鎯宠薄灏忔灄鐨勫叕鍙镐粖骞寸洰鏍囨槸鎵╁ぇ绾夸笂閿€鍞紝鍚屾椂棰勭畻寰堢揣锛屼汉鎵嬩篃涓嶅銆?瀹夊叏鍥㈤槦鎯冲仛寰堝浜嬶細涔版柊宸ュ叿銆佸仛鍩硅銆佹敼鐧诲綍銆佸姞寮虹洃鎺с€侀噸鍐欐斂绛栥€傛瘡浠朵簨鍚捣鏉ラ兘瀵癸紝浣嗗叕鍙镐笉鍙兘鍚屾椂鍋氬畬銆?杩欏氨鏄?security management planning 瑕佸鐞嗙殑闂銆傛崲鍙ヨ瘽璇达細瀹冭礋璐ｆ纭垱寤恒€佸疄鏂藉拰鎵ц security policy锛屽苟鎶?security funct...
鑰冮淇″彿锛?/p>
- 鐪嬪埌 business strategy锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 business strategy锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
- 鍏堢湅棰樼洰鏄湪闂畨鍏ㄨ鍒掍负浠€涔堣鍋氥€佽祫婧愭€庝箞鍙栬垗锛岃繕鏄皝浠庝笂寰€涓嬪畾鏀跨瓥
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細涓氬姟鎴樼暐瀵归綈涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 business strategy锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 瀛︿範鍗曞厓锛氬畨鍏ㄨ亴鑳戒笌涓氬姟鎴樼暐瀵归綈锛氬畨鍏ㄨ鍒掕鏈嶅姟鍏徃鐩爣 - 瀹夊叏绠＄悊瑙勫垝璐熻矗鍒涘缓銆佸疄鏂藉拰鎵ц瀹夊叏鏀跨瓥锛涘畠瑕佹妸瀹夊叏鑱岃兘瀵归綈鍏徃鐨勬垬鐣ャ€佺洰鏍囥€佷娇鍛藉拰璧勬簮闄愬埗锛屽苟鐢ㄨ嚜涓婅€屼笅鏂瑰紡璁╅珮灞傚畾鏂瑰悜銆佸悇灞傛墽琛屻€?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M063 policy / 鏀跨瓥
- 浼樺厛绾э細P2 绗簩鎵规墦纾ㄣ€?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佹祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛氭斂绛栥€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鏀跨瓥涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 policy锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 policy锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓銆?闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗椼€?闂?first/best锛岄€氬父鍏堝畾鑼冨洿銆佽矗浠汇€佺鐞嗘敮鎸佹垨椋庨櫓璇勪及锛屽啀閫夊伐鍏枫€?/li>
- 鐪嬪埌 policy锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄不鐞嗐€佽矗浠讳笌鏀跨瓥鈥濆垽鏂細闂皝璐熻矗锛屽氨鐪嬭皝鎷ユ湁涓氬姟銆佹暟鎹垨椋庨櫓
- 闂枃浠跺眰绾э紝灏卞垎鏀跨瓥銆佹爣鍑嗐€佺▼搴忋€佹寚鍗?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鏀跨瓥涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佷繚鎶ゅ鎴疯祫鏂欍€佹敮浠樼郴缁熴€佷緵搴斿晢璁块棶鍜屽憳宸ヨ处鍙枫€傛妧鏈汉鍛樺彲浠ユ墽琛屾帶鍒讹紝浣嗛闄╄兘涓嶈兘鎺ュ彈銆侀绠楁€庝箞缁欍€佽鍒欐€庝箞鍐欙紝涓嶈兘鍙敱鎶€鏈汉鍛樿嚜宸卞喅瀹氥€?姣斿锛氱鐞嗗眰鎵瑰噯瀹夊叏鐩爣鍜岄闄╂帴鍙椼€?鎵€浠ヨ€冭瘯鐪嬪埌 policy锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M064 DAD Triad / DAD 涓夊厓缁?/h3>
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬鏄撴贩娣嗐€佹ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆?/li>
- 鍒悕/棰樼溂锛欴AD Triad銆丏AD 涓夊厓缁勩€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涜ˉ鍏呰祫鏂?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鏂囨湰閲屽嚭鐜板尯鍒嗐€佷笉瑕併€佷笉鏄€佽€屾槸杩欑被淇″彿锛屽鏄撳拰鐩搁偦姒傚康娣枫€?/li>
灏忕櫧鍏堢湅锛?/p>
- DAD 鏄?CIA 鐨勫弽闈紝琛ㄧず瀹夊叏鍧忔帀鐨勪笁绉嶇粨鏋溿€侱isclosure 鏄瀵嗚鐪嬭锛孉lteration 鏄唴瀹硅鏀癸紝Destruction 鏄郴缁熸垨鏁版嵁琚牬鍧忓埌涓嶈兘鐢ㄣ€傚厛鐪嬪潖浜嬶紝鍐嶅弽鎺ㄥ畠浼ゅ埌浜?CIA 鍝竴椤广€?/li>
鑰冮淇″彿锛?/p>
- 棰樼洰鐢?DAD 璇翠簨鏁呮椂锛屾姭闇插搴旀満瀵嗘€э紝绡℃敼瀵瑰簲瀹屾暣鎬э紝鐮村潖瀵瑰簲鍙敤鎬с€?/li>
- 棰樼洰鐢?DAD 璇翠簨鏁呮椂锛屾姭闇插搴旀満瀵嗘€э紝绡℃敼瀵瑰簲瀹屾暣鎬э紝鐮村潖瀵瑰簲鍙敤鎬?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細DAD 鏄?CIA 鐨勫弽闈紝琛ㄧず瀹夊叏鍧忔帀鐨勪笁绉嶇粨鏋溿€侱isclosure 鏄瀵嗚鐪嬭锛孉lteration 鏄唴瀹硅鏀癸紝Destruction 鏄郴缁熸垨鏁版嵁琚牬鍧忓埌涓嶈兘鐢ㄣ€傚厛鐪嬪潖浜嬶紝鍐嶅弽鎺ㄥ畠浼ゅ埌浜?CIA 鍝竴椤广€?/li>
- 琛ュ厖璧勬枡锛?.2.4 DAD銆佽繃搴︿繚鎶ゃ€佺湡瀹炴€с€佷笉鍙惁璁ゆ€у拰AAA鏈嶅姟 - 绗?1 绔犲疄鐜板畨鍏ㄦ不鐞嗙殑鍘熷垯鍜岀瓥鐣?瑕佸湪绯荤粺涓婄淮鎶ゅ彲鐢ㄦ€э紝灏卞繀椤绘湁閫傚綋鐨勬帶鍒舵帾鏂戒互纭繚鎺堟潈鐨勮闂拰鍙帴鍙楃殑鎬ц兘姘?骞筹紝浠ュ揩閫熷鐞嗛€氫俊鐨勪腑鏂紝鎻愪緵鍐椾綑锛岀淮鎶ゅ彲闈犵殑澶囦唤锛屽苟闃叉鏁版嵁涓㈠け鎴栧彈鎹熴€?鍙敤鎬ч潰涓寸殑濞佽儊鏈夊緢澶氥€傝繖浜涘▉鑳佸寘鎷澶囨晠闅溿€佽蒋浠堕敊璇拰鐜闂锛堣繃...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M065 Authorization to Operate / 杩愯鎺堟潈 ATO
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛欰uthorization to Operate銆佽繍琛屾巿鏉?ATO銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涚珷鑺傚涔犲崟鍏?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
灏忕櫧鍏堢湅锛?/p>
- 杩愯鎺堟潈 ATO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 Authorization to Operate锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 鏍囬锛氥€婁汉鍛樺畨鍏細鍏ヨ亴銆佸湪鑱屻€佺鑱屻€?杩欓〉鍦ㄨ浠€涔堬細 杩欓〉鍦ㄨ锛氬憳宸ャ€佸鍖呬汉鍛樺拰璁垮鍦ㄨ繘鍏ュ叕鍙搞€佷娇鐢ㄧ郴缁熴€佺寮€鍏徃鏃讹紝鏉冮檺鍜岃矗浠绘€庝箞澶勭悊銆?鐜板疄閲屾€庝箞鍙戠敓锛?鍋囪鍏徃鎷涜仒瀹㈡湇銆佸紑鍙戜汉鍛樺拰绯荤粺绠＄悊鍛樸€傚叆鑱屽墠瑕佸仛鑳屾櫙璋冩煡锛岀湅宀椾綅鏄惁閫傚悎锛涘湪鑱屾椂瑕佸煿璁€佺缃蹭繚瀵嗗崗璁€佹寜宀椾綅缁欐潈闄愶紱绂昏亴鏃惰鏀跺洖闂ㄧ鍗°€佽澶囥€佽处鍙枫€佷护鐗屽拰瀵嗛挜锛岄伩鍏嶇鑱屼汉鍛樼户缁闂郴缁熸垨甯﹁蛋璧勬枡銆?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 Authorization to Operate锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉銆?闂兘璁块棶浠€涔堢湅鎺堟潈銆?闂潈闄愭ā鍨嬬湅 RBAC銆丄BAC銆丏AC銆丮AC銆?闂簨鍚庤拷璐ｇ湅鏃ュ織銆佸璁″拰璁拌处銆?/li>
- 鐪嬪埌 Authorization to Operate锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滆韩浠姐€佽璇併€佹巿鏉冧笌璁块棶鎺у埗鈥濆垽鏂細闂瘉鏄庤韩浠界湅璁よ瘉
- 闂兘璁块棶浠€涔堢湅鎺堟潈
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細杩愯鎺堟潈 ATO涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍛樺伐瑕佽繘鍏ヨ鍗曞悗鍙般€傜郴缁熷厛鐭ラ亾浠栧０绉拌嚜宸辨槸璋侊紝鍐嶇敤瀵嗙爜銆丮FA銆佽瘉涔︽垨鐢熺墿鐗瑰緛璇佹槑韬唤锛岀劧鍚庡喅瀹氫粬鑳戒笉鑳界湅瀹㈡埛璧勬枡銆佹敼璁㈠崟鎴栫鐞嗚处鍙凤紝鏈€鍚庣暀涓嬫棩蹇椼€?姣斿锛氳瘑鍒槸鎶ュ悕瀛椼€?鎵€浠ヨ€冭瘯鐪嬪埌 Authorization to Operate锛屽厛闂畠鏄湪瑙?..
- 瀛︿範鍗曞厓锛氫汉鍛樺畨鍏細鍏ヨ亴銆佸湪鑱屻€佺鑱?- 鍛樺伐銆佸鍖呬汉鍛樺拰璁垮鍦ㄨ繘鍏ュ叕鍙搞€佷娇鐢ㄧ郴缁熴€佺寮€鍏徃鏃讹紝鏉冮檺鍜岃矗浠绘€庝箞澶勭悊銆?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M066 FedRAMP
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佹硶寰?鍚堣銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛欶edRAMP銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涢搴撳弽鎺?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?1銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
- 鍏ㄥ眬棰樺簱鍛戒腑 1 娆★紝鍚庨潰瑕佹嬁棰樼洰鍙嶆帹璁板繂鍗°€?/li>
灏忕櫧鍏堢湅锛?/p>
- FedRAMP涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 FedRAMP锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 FedRAMP锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊銆?鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋勩€?鐪嬪埌 PCI DSS 鎯虫敮浠樺崱銆?鐪嬪埌 FedRAMP 鎯宠仈閭︿簯銆?鐪嬪埌 ISO/NIST/ITIL 鍒嗗埆鐪嬬鐞嗕綋绯汇€佹寚鍗楀拰鏈嶅姟绠＄悊銆?/li>
- 鐪嬪埌 FedRAMP锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滃畨鍏ㄦ鏋朵笌鏍囧噯鈥濆垽鏂細鐪嬪埌 COBIT 鎯?IT 娌荤悊
- 鐪嬪埌 SABSA 鎯充笟鍔￠┍鍔ㄥ畨鍏ㄦ灦鏋?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細FedRAMP涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃瑕佸缓璁惧畨鍏ㄤ綋绯汇€佺鐞?IT銆佽璁″畨鍏ㄦ灦鏋勩€佸鐞嗘敮浠樺崱銆佺粰鏀垮簻浜戞湇鍔″仛鎺堟潈鎴栨敼杩?IT 鏈嶅姟銆傛瘡涓鏋跺洖绛旂殑闂涓嶅悓銆?姣斿锛欳OBIT 鍋?IT 娌荤悊鍜屾帶鍒剁洰鏍囥€?鎵€浠ヨ€冭瘯鐪嬪埌 FedRAMP锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
- 棰樺簱锛欻enry's organization wants to meet federal security standards for the cloud services it provides. What program should he investigate to meet this goa...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M067 asset / 璧勪骇
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛氬緟琛ュ埆鍚嶃€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
灏忕櫧鍏堢湅锛?/p>
- 璧勪骇涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夊鎴疯祫鏂欍€佽鍗曡褰曘€佹簮浠ｇ爜銆佸浠界甯︺€佹棫纭洏銆佺焊璐ㄥ悎鍚屽拰绯荤粺璐﹀彿銆傝繖浜涢兘鍙兘甯︽潵涓氬姟浠峰€笺€佹硶寰嬭矗浠绘垨娉勯湶椋庨櫓銆?姣斿锛氭暟鎹墍鏈夎€呭喅瀹氬垎绫诲拰淇濇姢瑕佹眰銆?鎵€浠ヨ€冭瘯鐪嬪埌 asset锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 asset锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滆祫浜с€佹暟鎹笌鐢熷懡鍛ㄦ湡鈥濆垽鏂細鍏堢湅杩欐槸鍝被璧勪骇鎴栨暟鎹€?鍐嶇湅 owner/custodian/steward 璋佽礋璐ｄ粈涔堛€?鏈€鍚庣湅鍒涘缓銆佷娇鐢ㄣ€佷紶杈撱€佷繚瀛樸€佸綊妗ｃ€佹竻闄ゆ垨閿€姣併€?/li>
- 鐪嬪埌 asset锛屼笉瑕佸厛濂楅€氱敤妯℃澘
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細璧勪骇涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃鏈夊鎴疯祫鏂欍€佽鍗曡褰曘€佹簮浠ｇ爜銆佸浠界甯︺€佹棫纭洏銆佺焊璐ㄥ悎鍚屽拰绯荤粺璐﹀彿銆傝繖浜涢兘鍙兘甯︽潵涓氬姟浠峰€笺€佹硶寰嬭矗浠绘垨娉勯湶椋庨櫓銆?姣斿锛氭暟鎹墍鏈夎€呭喅瀹氬垎绫诲拰淇濇姢瑕佹眰銆?鎵€浠ヨ€冭瘯鐪嬪埌 asset锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M068 log / 鏃ュ織
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆佽矗浠昏竟鐣屻€?/li>
- 鍒悕/棰樼溂锛氭棩蹇椼€?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
灏忕櫧鍏堢湅锛?/p>
- 鏃ュ織涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 log锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鑰冮淇″彿锛?/p>
- 鐪嬪埌 log锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滃綋鍓嶇煡璇嗙偣鈥濆垽鏂細鍏堢湅鏍囬銆?鍐嶇湅棰樺共閲岃皝鍋氫簡浠€涔堛€?鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉曘€?/li>
- 鐪嬪埌 log锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鏈€鍚庣湅闂畾涔夈€佺洰鐨勩€侀『搴忋€佽矗浠昏繕鏄姙娉?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細鏃ュ織涓嶈鍙儗涓枃鍚嶃€傛斁鍥炵幇瀹為噷鐪嬶細鍋囪浣犵湅鍒颁竴涓柊瀹夊叏璇嶃€傚厛涓嶈鎬ョ潃鑳屽畾涔夛紝鍏堥棶瀹冨湪淇濇姢浠€涔堬紝鎬曚粈涔堝潖浜嬶紝璋佽礋璐ｏ紝鍧忎簡浼氶€犳垚浠€涔堟崯澶憋紝棰樼洰鏈€鍚庝竴鍙ヨ浣犲洖绛斾粈涔堛€?姣斿锛氬畠鍙兘鍦ㄨ浜嬫晠绫诲瀷銆?鎵€浠ヨ€冭瘯鐪嬪埌 log锛屽厛闂畠鏄湪瑙ｅ喅鍝欢浜嬶紝鍐嶆寜棰樼洰鏈€鍚庝竴鍙ュ垽鏂€?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M070 legally defensible / 娉曞緥鍙京鎶?/h3>
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傛湳璇€?/li>
- 鐭ヨ瘑绫诲瀷锛氬崗璁?鎶€鏈悕璇嶃€佹硶寰?鍚堣銆佺缉鍐?鑻辨枃棰樼溂銆?/li>
- 鍒悕/棰樼溂锛歭egally defensible銆佹硶寰嬪彲杈╂姢銆?/li>
- 鏉ユ簮锛氱珷鑺傛湳璇?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭鏈琛ㄥ崟鐙垪鍑猴紝璇存槑瀹冧笉鏄矾杩囩殑璇嶃€?/li>
灏忕櫧鍏堢湅锛?/p>
- 娉曞緥鍙京鎶や笉瑕佸彧鑳屼腑鏂囧悕銆傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃淇濆瓨瀹㈡埛璧勬枡銆佸憳宸ヨ褰曘€佹敮浠樺崱淇℃伅鍜岃皟鏌ユ棩蹇椼€傛妧鏈笂鍙兘鑳藉鍑恒€佹煡鐪嬨€佸垹闄ゆ垨浜ょ粰鍒汉锛屼絾鑳藉仛鍒颁笉绛変簬鑳藉悎娉曡繖鏍峰仛銆傝鍏堢湅娉曞緥渚濇嵁銆佸鎴峰悓鎰忋€佸悎鍚岃姹傘€佹暟鎹繚鐣欐湡闄愩€佸彇璇佽姹傚拰璺ㄥ闄愬埗銆?姣斿锛氬鎴疯姹傚垹闄や釜浜鸿祫鏂欙紝瑕佺湅閫傜敤闅愮娉曞拰淇濈暀涔夊姟銆?鎵€浠ヨ€冭瘯鐪嬪埌 legally defensible锛屽厛闂畠鏄湪瑙ｅ喅鍝?..
鑰冮淇″彿锛?/p>
- 鐪嬪埌 legally defensible锛屼笉瑕佸厛濂楅€氱敤妯℃澘銆傚厛鎸夆€滄硶寰嬨€侀殣绉佷笌鍚堣鈥濆垽鏂細棰樼洰闂硶瑙勬垨闅愮鏉冿紝鍏堢湅鏁版嵁绫诲瀷鍜屽湴鍖恒€?棰樼洰闂瘉鎹紝鍏堢湅瀹屾暣鎬с€佷繚绠￠摼鍜屾巿鏉冦€?棰樼洰闂煡璇嗕骇鏉冿紝鍏堝垎鐗堟潈銆佸晢鏍囥€佷笓鍒╁拰鍟嗕笟绉樺瘑銆?/li>
- 鐪嬪埌 legally defensible锛屼笉瑕佸厛濂楅€氱敤妯℃澘
- 鍏堟寜鈥滄硶寰嬨€侀殣绉佷笌鍚堣鈥濆垽鏂細棰樼洰闂硶瑙勬垨闅愮鏉冿紝鍏堢湅鏁版嵁绫诲瀷鍜屽湴鍖?/li>
- 棰樼洰闂瘉鎹紝鍏堢湅瀹屾暣鎬с€佷繚绠￠摼鍜屾巿鏉?/li>
鏉ユ簮璇佹嵁锛?/p>
- 鏈琛細娉曞緥鍙京鎶や笉瑕佸彧鑳屼腑鏂囧悕銆傛斁鍥炵幇瀹為噷鐪嬶細鍋囪鍏徃淇濆瓨瀹㈡埛璧勬枡銆佸憳宸ヨ褰曘€佹敮浠樺崱淇℃伅鍜岃皟鏌ユ棩蹇椼€傛妧鏈笂鍙兘鑳藉鍑恒€佹煡鐪嬨€佸垹闄ゆ垨浜ょ粰鍒汉锛屼絾鑳藉仛鍒颁笉绛変簬鑳藉悎娉曡繖鏍峰仛銆傝鍏堢湅娉曞緥渚濇嵁銆佸鎴峰悓鎰忋€佸悎鍚岃姹傘€佹暟鎹繚鐣欐湡闄愩€佸彇璇佽姹傚拰璺ㄥ闄愬埗銆?姣斿锛氬鎴疯姹傚垹闄や釜浜鸿祫鏂欙紝瑕佺湅閫傜敤闅愮娉曞拰淇濈暀涔夊姟銆?鎵€浠ヨ€冭瘯...
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M071 濞佽儊鎺掑簭锛氭鐜囦箻浼ゅ涓庨珮/涓?浣庣儹鍔涘浘
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傚涔犲崟鍏冦€?/li>
- 鐭ヨ瘑绫诲瀷锛氭祦绋?椤哄簭銆佺缉鍐?鑻辨枃棰樼溂銆?/li>
- 鍒悕/棰樼溂锛氬▉鑳佹帓搴忥細姒傜巼涔樹激瀹充笌楂?涓?浣庣儹鍔涘浘銆?/li>
- 鏉ユ簮锛氱珷鑺傚涔犲崟鍏?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
灏忕櫧鍏堢湅锛?/p>
- 灏忔灄鍥㈤槦鍒楀嚭鍗佸嚑涓▉鑳侊細鏈夌殑寰堝彲鑳藉彂鐢熶絾浼ゅ灏忥紝鏈夌殑涓嶅父鍙戠敓浣嗕激瀹冲ぇ銆?鍥犱负瀹夊叏璧勬簮鏈夐檺锛屾墍浠ュ洟闃熻鍏堢煡閬撳摢涓?threat 鏈€璇ヤ紭鍏堝鐞嗐€?Probability x Damage Potential 鏄竴绉嶆帓搴忓姙娉曘€傛崲鍙ヨ瘽璇达細缁欏彂鐢熸鐜囧拰浼ゅ娼滃姏鍚勬墦 1 鍒?10 鍒嗭紝鐩镐箻寰楀埌 1 鍒?100 鐨?severity number銆?杩欎簺鍒嗘暟浼氭湁涓昏鎬э紝...
鑰冮淇″彿锛?/p>
- 鍏堢湅棰樼洰鏄湪闂暟瀛楄瘎鍒嗭紝杩樻槸楂?涓?浣庣煩闃?/li>
- 棰樼洰璇?probability times damage potential -> 鎯冲埌椋庨櫓涓ラ噸搴︽暟瀛?-> 閫?Probability x Damage Potential
- 棰樼洰璇?1 to 100 scale -> 鎯冲埌鐩镐箻璇勫垎 -> 閫?鐩镐箻璇勫垎
- 棰樼洰璇?green/yellow/red or nine squares -> 鎯冲埌 risk matrix/heat map -> 閫?risk matrix/heat map
鏉ユ簮璇佹嵁锛?/p>
- 瀛︿範鍗曞厓锛氬▉鑳佹帓搴忥細姒傜巼涔樹激瀹充笌楂?涓?浣庣儹鍔涘浘 - 濞佽儊璁板綍瀹屽悗瑕佹帓搴忥紱Probability x Damage Potential 鐢ㄦ暟瀛楁瘮杈冧弗閲嶅害锛涢珮/涓?浣庣煩闃电敤姒傜巼鍜屼激瀹虫妸濞佽儊鏀捐繘浼樺厛绾ф牸瀛愩€?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>
CH01-M072 瀹夊叏渚涘簲閾撅細鏈€缁堜骇鍝佷负浠€涔堝彲鑳借涓婃父姹℃煋
- 浼樺厛绾э細P3 鍊欓€変繚鐣欙紝鍚庨潰鍐嶇瓫銆?/li>
- 鍒嗙被锛氱珷鑺傚涔犲崟鍏冦€?/li>
- 鐭ヨ瘑绫诲瀷锛氭ā鍨?妗嗘灦銆佺缉鍐?鑻辨枃棰樼溂銆?/li>
- 鍒悕/棰樼溂锛氬畨鍏ㄤ緵搴旈摼锛氭渶缁堜骇鍝佷负浠€涔堝彲鑳借涓婃父姹℃煋銆?/li>
- 鏉ユ簮锛氱珷鑺傚涔犲崟鍏?1锛涘畼鏂圭粌涔?0锛涢搴撳懡涓?0銆?/li>
涓轰粈涔堝€煎緱鑳岋細
- 绔犺妭瀛︿範鍗曞厓璁蹭簡 1 娆★紝璇存槑瀹冩湁涓婁笅鏂囥€?/li>
灏忕櫧鍏堢湅锛?/p>
- 灏忔灄鍏徃閲囪喘涓€鎵圭綉缁滆澶囥€傝澶囪兘寮€鏈恒€佸姛鑳戒篃姝ｅ父锛屼絾杩欎笉浠ｈ〃閲岄潰娌℃湁琚姩杩囨墜鑴氥€?鍥犱负鏈€缁堜骇鍝佺敱寰堝涓婃父鏉愭枡銆佺‖浠躲€佸浐浠躲€佽蒋浠跺拰鏈嶅姟缁勬垚锛屾墍浠ヤ换浣曚竴涓幆鑺傝姹℃煋锛屾渶缁堜骇鍝侀兘鍙兘鍙楀奖鍝嶃€?Secure supply chain 鐨勭洰鏍囨槸 finished product 璐ㄩ噺瓒冲銆佹弧瓒虫€ц兘鍜岃繍钀ョ洰鏍囷紝骞舵彁渚涘０鏄庣殑瀹夊叏鏈哄埗銆傛崲鍙ヨ瘽璇达細鏁翠釜杩囩▼涓笉鑳芥湁 unau...
鑰冮淇″彿锛?/p>
- 鍏堢湅棰樼洰鏄湪闂渶缁堜骇鍝佽川閲忋€佷緵搴旈摼姹℃煋锛岃繕鏄氦浠樺欢杩?/li>
- 棰樼洰璇?finished product meets security mechanisms -> 鎯冲埌 secure supply chain -> 閫?secure supply chain
- 棰樼洰璇?trusted source but asset poisoned -> 鎯冲埌 supply chain threat vector -> 閫?supply chain threat vector
- 棰樼洰璇?just-in-time and no surplus -> 鎯冲埌渚涘簲閾句腑鏂闄?-> 閫?渚涘簲閾句腑鏂闄?/li>
鏉ユ簮璇佹嵁锛?/p>
- 瀛︿範鍗曞厓锛氬畨鍏ㄤ緵搴旈摼锛氭渶缁堜骇鍝佷负浠€涔堝彲鑳借涓婃父姹℃煋 - 渚涘簲閾剧洰鏍囨槸鏈€缁堜骇鍝佽川閲忋€佹€ц兘鍜屽畨鍏ㄦ満鍒堕兘鍙俊锛涗緵搴旈摼鍙兘琚鏀广€侀€犲亣銆佹鍏ユ垨寤惰繜锛岀敋鑷冲湪纭欢銆佸浐浠躲€佽蒋浠堕噷鐣欎笅杩滅▼璁块棶鎴栫洃鍚満鍒躲€?/li>
鍚庣画璁板繂鍗℃€庝箞鍐欙細
- 鐪熸瑕佽儗浠€涔堬細浠庝笂闈㈣瘉鎹噷鎻?2 鍒?5 涓偣锛屼笉鎶婃暣娈垫暀鏉愭惉杩涙潵銆?/li>
- 鍏抽敭璇嶆媶瑙ｏ細鍏堟媶鑻辨枃棰樼溂锛屽啀鎷嗕腑鏂囧満鏅紝鍐嶆媶瀹规槗閿欓€夌殑骞叉壈椤广€?/li>
- 璋愰煶鍊欓€夋睜锛氬厛鍒楀涓€欓€夛紝鍐欐窐姹扮悊鐢憋紝涓嶈兘鐩存帴鎷嶄竴涓瘝銆?/li>
- 灏忕櫧鏁呬簨锛氱敤涓€涓幇瀹炲満鏅妸鍏抽敭璇嶄覆璧锋潵锛屾渶鍚庤兘鍥炲埌棰樼洰銆?/li>