CISSP_考试英语词汇及语法复习资料.docxVIP

第PAGE页共NUMPAGES页

CISSP考试英语词汇及语法复习资料

一、选择题（每题2分，共10题）

1.Whichofthefollowingtermsbestdescribestheprocessofensuringthatonlyauthorizedindividualscanaccesssensitiveinformation?

A)Confidentiality

B)Integrity

C)Availability

D)Non-repudiation

2.InISO27001,whichcontrolprovidesprotectionagainstunauthorizedaccesstoinformationsystems?

A)Cryptographiccontrols

B)Physicalsecuritycontrols

C)Accesscontrolpolicies

D)Continuityofoperationsplanning

3.Whatistheprimarypurposeofariskassessmentincybersecurity?

A)Toeliminateallrisks

B)Toidentifyandprioritizerisks

C)Tocreateabudgetforsecuritymeasures

D)Toreporttoregulatorybodiesonly

4.Whichofthefollowingisacommonvulnerabilityincloudcomputingenvironments?

A)Misconfigurationofsecuritysettings

B)Lackofencryption

C)Noaccesscontrols

D)Alloftheabove

5.Whichtermreferstotheabilityofasystemtocontinueoperatingdespitedisruptions?

A)Resilience

B)Redundancy

C)Faulttolerance

D)Highavailability

二、填空题（每题3分，共5题）

6.Theprincipleofleastprivilegeensuresthatusershaveonlythe________permissionsnecessarytoperformtheirjobfunctions.

7.A________isadocumentedsetofproceduresthatorganizationsfollowtorespondtosecurityincidents.

8.The________frameworkprovidesastructuredapproachtomanaginginformationsecurityrisks.

9.________istheprocessofverifyingthatdatahasnotbeenalteredduringtransmission.

10.Ina________architecture,multiplesystemsworktogethertoachieveacommongoalwithoutcentralizedcontrol.

三、句子改错题（每题4分，共5题）

11.Theorganizationimplementaccesscontrolpoliciestoprotectitssensitivedatafromunauthorizeddisclosure.

Identifyandcorrectthegrammaticalerror.

12.Employeesmustreportanysuspiciousactivitytothesecurityteamimmediately,orelsetheywillfacedisciplinaryaction.

Identifyandcorrectthegrammaticalerror.

13.Thefirewallconfigurationwasu