7月12号（350-018 ）通过

sinkuro82

今天考完安全IE笔试，只读了论坛里的Q140。考试中只有3个新题，其他的全部都在Q140里面。去考试的兄弟一定要把题目背熟.

7 s( }4 ~$ |" D2 \& s+ Y' Z1. CoPP
" Q( e- Y! e8 K$ y/ C- v2. dACL
3. ISO27002
( J1 |0 `. r% s; e9 D% ?- T
4 Y% d: p2 N6 L
( [) E3 M* z* @& ]8 I! {; p感谢论坛里的兄弟分享题库！
6 m+ t" j4 E; R, M
  T/ [+ B9 [# \! A
7 O2 F2 e6 z$ ]  L1 `

auwp

ISO 27002 是这个题吗？

Which three statements regarding ISO 27002 and COBIT are correct? (Choose three.)

A. COBIT and ISO 27002 both define a best practices framework for IT controls.
9 p8 ~3 A4 m. r3 L9 z& B
B. COBIT focuses on information system processes, whereas ISO 27002 focuses on the security of the information systems.
6 I" B( P0 r. o8 `. [/ r
7 {+ |9 N2 c& kC. ISO 27002 addresses control objectives, whereas COBIT addresses information security management process requirements.
; o2 W7 z- ?3 |( X
0 k6 b( e" D  cD. Compared to COBIT, ISO 27002 covers a broader area in planning, operations, delivery, support, maintenance, and IT governance.

E. Unlike COBIT, ISO 27002 is used mainly by the IT audit community to demonstrate risk mitigation and avoidance mechanisms.
. I$ m3 A# X1 `; x  U! ]8 ?" }
Answer: ABC

sinkuro82

不是。 ISO27002 control of access code.... 选一个答案。

pengming777

对 这个题是单选

auwp

那应该选什么答案呢？