信息安全工程師當(dāng)天每日一練試題地址：www.jazzmuze.com/exam/ExamDay.aspx?t1=6

往期信息安全工程師每日一練試題匯總：www.jazzmuze.com/class27-6-1.aspx

信息安全工程師每日一練試題（2018/12/24）在線測(cè)試：www.jazzmuze.com/exam/ExamDay.aspx?t1=6&day=2018/12/24

信息安全工程師每日一練試題內(nèi)容（2018/12/24）

試題1：

網(wǎng)絡(luò)的可用性是指( )。
A、網(wǎng)絡(luò)通信能力的大小
B、用戶用于網(wǎng)絡(luò)維修的時(shí)間
C、網(wǎng)絡(luò)的可靠性
D、用戶可利用網(wǎng)絡(luò)時(shí)間的百分比

試題解析與討論：www.jazzmuze.com/st/92613189.html
試題參考答案：D

試題2： 1995年Kruchten提出了著名的“4+1”視圖，用來(lái)描述軟件愛(ài)你系統(tǒng)的架構(gòu)。在“4+1”視圖中，（1）用來(lái)描述設(shè)計(jì)的對(duì)象模型和對(duì)象之間的關(guān)系；（2）描述了軟件模塊的組織與管理；（3）描述設(shè)計(jì)的并發(fā)同步特征。
(1)A.邏輯視圖
B.用例視圖
C.過(guò)程視圖
D.開(kāi)發(fā)視圖
(2)A.邏輯視圖
B.用例視圖
C.過(guò)程視圖
D.開(kāi)發(fā)視圖
(3)A.邏輯視圖
B.用例視圖
C.過(guò)程視圖
D.開(kāi)發(fā)視圖
試題解析與討論：www.jazzmuze.com/st/1299910243.html
試題參考答案：D、A、C

試題3： 甲公司的某個(gè)注冊(cè)商標(biāo)是乙畫(huà)家創(chuàng)作的繪畫(huà)作品，甲申請(qǐng)?jiān)撋虡?biāo)注冊(cè)時(shí)未經(jīng)乙的許可，乙認(rèn)為其著作權(quán)受到侵害。在乙可采取的以下做法中，錯(cuò)誤的是（）。
A.向甲公司所在地人民法院提起著作權(quán)侵權(quán)訴訟
B.請(qǐng)求商標(biāo)評(píng)審委員會(huì)裁定撤銷甲的注冊(cè)商標(biāo)
C.首先提起訴訟，如對(duì)法院判決不服再請(qǐng)求商標(biāo)評(píng)審委員會(huì)進(jìn)行裁定
D.與甲交涉，采取許可方式讓甲繼續(xù)使用該注冊(cè)商標(biāo)試題解析與討論：www.jazzmuze.com/st/130131690.html
試題參考答案：C

試題4： 以下關(guān)于軟件測(cè)試工具的敘述，錯(cuò)誤的是（）。
A. 靜態(tài)測(cè)試工具可用于對(duì)軟件需求、結(jié)構(gòu)設(shè)計(jì)、詳細(xì)設(shè)計(jì)和代碼進(jìn)行評(píng)審、走查和審查
B. 靜態(tài)測(cè)試工具可對(duì)軟件的復(fù)雜度分析、數(shù)據(jù)流分析、控制流分析和接口分析提供支持
C. 動(dòng)態(tài)測(cè)試工具可用于軟件的覆蓋分析和性能分析
D. 動(dòng)態(tài)測(cè)試工具不支持軟件的仿真測(cè)試和變異測(cè)試
試題解析與討論：www.jazzmuze.com/st/1879726715.html
試題參考答案：D

試題5： 識(shí)別風(fēng)險(xiǎn)、非風(fēng)險(xiǎn)、敏感點(diǎn)和權(quán)衡點(diǎn)是進(jìn)行軟件架構(gòu)評(píng)估的重要過(guò)程?！案淖儤I(yè)務(wù)數(shù)據(jù)編碼方式會(huì)對(duì)系統(tǒng)的性能和安全性產(chǎn)生影響”是對(duì)（1）的描述，“假設(shè)用戶請(qǐng)求的頻率為每秒1個(gè)，業(yè)務(wù)處理時(shí)間小于30毫秒，則將請(qǐng)求響應(yīng)時(shí)間設(shè)定為1秒鐘是可以接受的”是對(duì)（2）的描述。
(1)A．風(fēng)險(xiǎn)點(diǎn)
B．非風(fēng)險(xiǎn)
C．敏感點(diǎn)
D．權(quán)衡點(diǎn)
(2)A．風(fēng)險(xiǎn)點(diǎn)
B．非風(fēng)險(xiǎn)
C．敏感點(diǎn)
D．權(quán)衡點(diǎn)
試題解析與討論：www.jazzmuze.com/st/1890120926.html
試題參考答案：D、B

試題6：

某公司財(cái)務(wù)管理數(shù)據(jù)只能提供給授權(quán)用戶，通過(guò)采取安全管理措施確保不能被未授權(quán)的個(gè)人、實(shí)體或過(guò)程利用或知悉，以確保數(shù)據(jù)的（ ）
A、保密性
B、完整性
C、可用性
D、穩(wěn)定性

試題解析與討論：www.jazzmuze.com/st/2122726164.html
試題參考答案：A

試題7：

The objective of （）is to determine what parts of the application software will be assigned to what hardware.The major software components of the system being developed have to be identified and then allocated to the various hardware components on which the system will operate. All software systems can be divided into four basic functions. The first is（）. Most information systems require data to be stored and retrieved,whether a small file,such as a memo produced by a word processor,or a large database,such as one that stores an organization’s accounting records. The second function is the （）,the processing required to access data,which often means database queries in Structured Query Language. The third function is the （）,which is the logic documented in the DFDs,use cases,and functional requirements.The fourth function is the presentation logic,the display of information to the user and the acceptance of the user’s commands.The three primary hardware components of a system are （）.
A．a(chǎn)rchitecture design
B．modular design
C．physical design
D．distribution design


A．data access components
B．database management system
C．data storage
D．data entities


A．data persistence
B．data access objects
C．database connection
D．dataaccess logic


A．system requirements
B．system architecture
C．a(chǎn)pplication logic
D．a(chǎn)pplication program


A．computers,cables and network
B．clients,servers,and network
C．CPUs,memories and I/O devices
D．CPUs,hard disks and I/O devices

試題解析與討論：www.jazzmuze.com/st/2895518241.html
試題參考答案：A、C、D、C、B

試題8： 安全審計(jì)（security audit）是通過(guò)測(cè)試公司信息系統(tǒng)對(duì)一套確定標(biāo)準(zhǔn)的符合程度來(lái)評(píng)估其安全性的系統(tǒng)方法，安全審計(jì)的主要作用不包括（）。
A、對(duì)潛在的攻擊者起到震懾或警告作用
B、對(duì)已發(fā)生的系統(tǒng)破壞行為提供有效的追究證據(jù)
C、通過(guò)提供日志，幫助系統(tǒng)管理員發(fā)現(xiàn)入侵行為或潛在漏洞
D、通過(guò)性能測(cè)試，幫助系統(tǒng)管理員發(fā)現(xiàn)性能缺陷或不足
試題解析與討論：www.jazzmuze.com/st/325514765.html
試題參考答案：D

試題9： 為了使一個(gè)接口的規(guī)范和實(shí)現(xiàn)該接口的構(gòu)件得到廣泛應(yīng)用，需要實(shí)現(xiàn)接口的標(biāo)準(zhǔn)化。接口標(biāo)準(zhǔn)化是對(duì)（ ）的標(biāo)準(zhǔn)化。
A.保證接口唯一性的命名方案
B.接口中消息模式、格式和協(xié)議
C.接口中所接收的數(shù)據(jù)格式
D.接口消息適用語(yǔ)境
試題解析與討論：www.jazzmuze.com/st/393209198.html
試題參考答案：B

試題10： The architecture design specifies the overall architecture and the placement of software and hardware that will be used. Architecture design is a very complex process that is often left to experienced architecture designers and consultants. The first step is to refine the (71) into more detailed requirements that are then employed to help select the architecture to be used and the software components to be placed on each device. In a (72), one also has to decide whether to use a two-tier, three-tier,or n-tier architecture. Then the requirements and the architecture design are used to develop the hardware and software specification. There are four primary types of nonfunctional requirements that can be important in designing the architecture. (73) specify the operating environment(s) in which the system must perform and how those may change over time. (74) focus on the nonfunctional requirements issues such as response time,capacity,and reliability. (75) are the abilities to protect the information system from disruption and data loss, whether caused by an intentional act. Cultural and political requirements are specific to the countries in which the system will be used.
（71）A.functional requirements
B.nonfunctional requirements
C.system constraint
D.system operational environment
（72）A.client-based architecture
B.server-based architecture
C.network architecture
D.client-server architecture
（73）A.Operational requirements
B.Speed requirement
C.Access control requirements
D.Customization requirements
（74）A.Environment requirements
B.Maintainability requirements
C.Performance requirements
D.Virus control requirements
（75）A.Safety requirements
B.Security requirements
C.Data management requirements
D.System requirements
試題解析與討論：www.jazzmuze.com/st/3936428375.html
試題參考答案：B、D、A、C、B