1⟩ Maintenance of the Business Continuity Plan (BCP) must be integrated with an organizations _______________ process. A. Change-control B. Disaster-recovery C. Inventory-maintenance D. Discretionary-budget E. Compensation-review?
A. Change-control
Check Point Certification
Home Certifications Check Point Certification
“Check Point Certification Exams guideline for job interview preparation. Explore list of Check Point Certification Exams frequently asked questions(FAQs) asked in number of Check Point Certification Exams interviews. Post your comments as your suggestions, questions and answers on any Check Point Certification Exams Interview Question or answer. Ask Check Point Certification Exams Question, your question will be answered by our fellow friends.”
35 Check Point Certification Questions And Answers
2⟩ ____________________ is the state of being correct, or the degree of certainty a person or process can have, that the data in an information asset is correct. A. Confidentiality B. Integrity C. Authenticity D. Privacy E. Availability?
B. Integrity
3⟩ A(n) _______________ is an abstract machine, which mediates all access subjects have to objects. A. ACL B. Reference monitor C. State machine D. TCB E. Router?
B. Reference monitor
4⟩ Explain Which types of security solutions should a home user deploy? (Choose TWO.) A. Managed Security Gateway B. Access control lists on a router C. Personal firewall D. Network intrusion-detection system E. Anti-virus software?
C. Personal firewall
E. Anti-virus software
5⟩ Explain Which of these metrics measure how a biometric device performs, when attempting to authenticate subjects? (Choose THREE.) A. False Rejection Rate B. User Acceptance Rate C. Crossover Error Rate D. False Acceptance Rate E. Enrollment Failure Rate?
A. False Rejection Rate
C. Crossover Error Rate
D. False Acceptance Rate
6⟩ _________ is a smaller, enhanced version of the X.500 protocol. It is used to provide directory- service information. (Choose the BEST answer.) A. Lightweight Directory Access Protocol B. X.400 Directory Access Protocol C. Access control list D. Lightweight Host Configuration Protocol E. Role-based access control?
A. Lightweight Directory Access Protocol
7⟩ Suppose A (n) __________________________ is issued by senior management, and defines an organizations security goals. A. Records-retention procedure B. Acceptable-use policy C. Organizational security policy D. Security policy mission statement E. Service level agreement?
D. Security policy mission statement
8⟩ Explain Which type of Business Continuity Plan (BCP) test involves practicing aspects of the BCP, without actually interrupting operations or bringing an alternate site on-line? A. Structured walkthrough B. Checklist C. Simulation D. Full interruption E. Parallel
C. Simulation
9⟩ Explain Which of the following can be stored on a workstation? (Choose TWO.) A. Payroll information B. Data objects used by many employees C. Databases D. Interoffice memo E. Customer correspondence
D. Interoffice memo
E. Customer correspondence
10⟩ A(n) ______________________________ is a quantitative review of risks, to determine how an organization will continue to function, in the event a risk is realized. A. Monitored risk process B. Disaster-recovery plan C. Business impact analysis D. Full interruption test E. Information security audit
C. Business impact analysis
11⟩ Explain Who should have physical access to network-connectivity devices and corporate servers? A. Customers and clients B. Accounting, information-technology, and auditing staff C. Managers and C-level executives D. Only appropriate information-technology personnel
D. Only appropriate information-technology personnel
12⟩ _______ is a method of tricking users into revealing passwords, or other sensitive information. A. Dumpster diving B. Means testing C. Social engineering D. Risk E. Exposure
C. Social engineering
13⟩ Explain Which of the following are enterprise administrative controls? (Choose TWO.) A. Network access control B. Facility access control C. Password authentication D. Background checks E. Employee handbooks
D. Background checks
E. Employee handbooks
14⟩ A new U.S. Federal Information Processing Standard specifies a cryptographic algorithm. This algorithm is used by U.S. government organizations to protect sensitive, but unclassified, information. What is the name of this Standard? A. Triple DES B. Blowfish C. AES D. CAST E. RSA
C. AES
15⟩ Explain Which of the following tests provides testing teams some information about hosts or networks? A. Partial-knowledge test B. Full-knowledge test C. Zero-knowledge test
A. Partial-knowledge test
16⟩ (n) ________________ is a one-way mathematical function that maps variable values into smaller values of a fixed length. A. Symmetric key B. Algorithm C. Back door D. Hash function E. Integrity
D. Hash function
17⟩ _______ intrusion-detection systems learn the behavior of a machine or network, and create a baseline. A. Behavioral analysis B. Statistical anomaly C. Network D. Pattern matching E. Host
B. Statistical anomaly
18⟩ Explain Which principle of secure design states that a security mechanisms methods must be testable? A. Separation of privilege B. Least common mechanism C. Complete mediation D. Open design E. Economy of mechanism
D. Open design
19⟩ Explain Which of the following should be included in an enterprise Business Continuity Plan (BCP)? (Choose THREE.) A. Accidental or intentional data deletion B. Severe weather disasters C. Employee terminations D. Employee administrative leave E. Minor power outages
A. Accidental or intentional data deletion
B. Severe weather disasters
E. Minor power outages
20⟩ Explain What type of document contains information on alternative business locations, IT resources, and personnel? A. End-user license agreement B. Nondisclosure agreement C. Acceptable use policy D. Security policy E. Business continuity plan?
E. Business continuity plan
