Security+认证模拟题.pdfVIP

Security+认证模拟题 800.Highly sensitive data is stored in a database and is accessed by an application on a DMZ server. The disk drives on all servers are fully encrypted. Communication between the application server and end-users is also encrypted. Network ACLs prevent any connections to the database server except from the application server. Which of the following can still result in exposure of the sensitive data in the database server? A. SQL Injection B. Theft of the physical database server C. Cookies D. Cross-site scripting 800 ．高度敏感的数据存储在数据库中并被DMZ 服务器上的应用程序访问。所有服务器上的磁盘驱动 器都已完全加密。应用服务器和最终用户之间的通信也被加密。网络访问控制列表防止除了应用服务 器外的任何连接访问数据库服务器。下列哪项仍然会导致数据库服务器中敏感数据暴露？ A. SQL 注入 B. 盗窃物理的数据库服务器 C. Cookies D. 跨站脚本 801.The fundamental information security principals include confidentiality, availability and which of the following? A. The ability to secure data against unauthorized disclosure to external sources B. The capacity of a system to resist unauthorized changes to stored information C. The confidence with which a system can attest to the identity of a user D. The characteristic of a system to provide uninterrupted service to authorized users 801. 基本信息安全原则包括保密性、可用性和下列哪项 A.确保数据不会未经授权的泄露到外部的能力 B.系统抵御未经授权的变更存储的信息的能力 C.系统可以证明用户身份的能力 D.为授权用户提供不间断服务的能力 802.Which of the following is the MOST likely cause of users being unable to verify a single users email signature and that user being unable to decrypt sent messages? A. Unmatched key pairs B. Corrupt key escrow C. Weak public key D. Weak private key 802. 下列哪项是用户无法验证单个用户的电子邮件签名和用户无法解密发送的消息的最可能原因？ A. 不匹配的密钥对 B. 损坏密钥托管 C. 弱的公钥 D. 弱的私钥 803.Full disk encryption is MOST effective against which of the following threats? A. Denial of service by data destruction B. Eavesdropping emanations C. Malicious code D. Theft of hardware 803.全盘加密是最有效的对付以下哪项威胁的手段？ A. 数据破坏导致不能提供服务 B. 电磁侦听 C.