ModerateMedium+high

7. 
   Specify the distribution kit that is used for penetration testing in various web applications
   

Samurai Web SecurityFramework SantokuLinuxDEFTLinuxNetworkSecurityToolkit

8. 
   A computer program, piece of code, or sequence of commands that uses a vulnerability to attack a system.
   

Exploit+SQL injectionDebuggers

9. 
   What are programs for finding errors in other programs, operating system kernels, SQL queries and other types of code
   

Debuggers+SQL injectionExploit10.ISSAF...........describes the security assessment of firewalls, routers, antivirussystemsand more+

---

focusedonpentestingthatorganizationsneed,processing, storing and transmitting dataaboutcardholders.focusedonpentestingthatorganizationsneed,processing, storing and transmittingdata about cardholders.

11. 
    What is the security distribution based on - Parrot Security OS?
    

DebianLinux.+UbuntuArchLinux.GentooLinux

11. 
    . is one of the first methods of
    

comprehensivetestingofinformationsecurityofanorganization..PCIDSSOSSTM+MISSAF

11. 
    The probability of making an attack is approximately equal to 0.5)
    

Very lowНизкаяMedium+

11. 
    What type of projects does SysTrust belong to?
    

TrustServiceServicesSecurityServices15. Atthelaststage oftheaudit ofinformationsecurity,recommendationsaredeveloped toimprovetheorganizationalandtechnical support of protection at the enterprise. Such recommendations include various types ofactionsaimedat. minimization of identified risks+Risk ReductionRiskavoidanceChangingthenatureoftherisk

11. 
    The probability of an attack is quite low. Corresponds to the numerical probability interval [0.25, 0.5)
    

Very lowLow+Medium

11. 
    In which audit do experts model the actions of an “external” intruder?
    

external active audit+internalactiveaudit

11. 
    How is the risk value determined?
    

Risk = (resourcecost* probability of threat): magnitudeof vulnerability+Risk = (resourcecost+ probability of threat): magnitudeof vulnerabilityRisk = (resource

---

cost-probability of threat): magnitudeof vulnerability

11. 
    Choose an attack probability that matches the description "An attack will almost never be carried out.
    

Corresponds to the numerical interval of the probability [0, 0.25)"Very low+Low(Medium)

11. 
    When conducting what type of audit with the help of special software tools, the actions of an “internal” attacker are modeled)?
    

(external active audit)(internalactiveaudit)+

11. 
    Choose the level of damage suitable for the description "Minor losses of material assets that are quickly restored, or minor consequences for the reputation of the company")
    

(Minor) +(Moderate)(Medium)(high)

11. 
    Kali Linux formerly known as.
    

BackTrack+WiresharkArmitageAircrack

11. 
    (Noticeable loss of tangible assets or moderate impact on the company's reputation")
    

Minor)(Moderate) +(Medium)(high)

11. 
    (Large loss of tangible assets and great damage to the company's reputation")
    

Малый(Minor)Умеренный(Moderate)Средней тяжести (Medium)Большой(high)+

11. 
    (How is the risk value calculated?)
    

Риск(a) =P(a)×Ущерб(a).+Риск (a) = Pиск(a) × Ущерб (a).Риск(a)=P(a) +Ущерб (a).Риск(a)=P(a)/Ущерб(a).

11. 
    (The attack will almost certainly be carried out. Corresponds to the numerical probability interval (0.75, 1])
    

Оченьнизкая (Very low)Низкая(low)Средняя (Medium)Высокая(High)Очень

---

высокая(Veryhigh)+

11. 
    The attack is likely to be carried out. Corresponds to the numerical probability interval (0.5, 0.75]
    

Оченьнизкая (Very low)Низкая(low)Средняя (Medium)+Высокая(High)

11. 
    (How many penetration testing utilities does Kali Linux contain?)
    

более чем из 600 security-утилит+13591664

11. 
    Specify a standard that allows financial auditors to expand the scope of their activities by using a simple and understandable set of requirements for assessing the reliability and security of IS.)
    

SysTrust+BSI\ITBaselineProtectionManualISO17799:CodeofPracticeforInformationSecurityManagementISO 15408: Common Criteria for Information Technology Security Evaluation30. focusedonpentesting that organizations need, processing, storing and transmitting data about cardholders.)PCIDSS+OSSTMMISSAFMIDTERM

1. 
   Which organization is the world leader in harmonizing and centralizing IT control practices? Какая организация является мировым лидером по гармонизации и централизации практических стандартов в области контроля за ИТ?
   

ISACA+IEEEISO

2. 
   What is the main difference between strategic IT audit and other types of IT audit? В чем состоит главное отличие стратегического ИТ -аудита от других видов ИТ- аудита?
   

necessarily includes an assessment of TCO by the company's information systems (обязательновключаетоценкуССВинформационнымисистемамикомпании)The ultimate goal of a strategic IT audit is to identify the reasons for the discomfort of the topmanagement of the organization in connection with the use of IT. (конечной цельюстратегического И - аудита является идентификация причин дискомфорта высшегоруководства

---

организации всвязи сиспользованиемИТ)+aconsultingcompanyisrequiredtoconductastrategicITaudit (для проведениястратегическогои-аудитаобязательнопривлекаетсяконсалтинговаякомпания)

3.   1   2   3

---

Смотрите также файлы

• Компьютер и здоровье человека.docx

• Ситуаційні завдання до екзамену з фармакології.docx

• Программа для школ с использованием таких основных тем как, энергия, вода, мусор, здоровый образ жизни, изменение климата, разумное потребление.ppt

• Практическая работа к теме Доверие к государству Тема занятия Что мы Родиной зовем Класс 4.docx

• Занятие по всеобщей истории. Часть Вопрос. В чем причина распада Римской империи и падения Западной Римской империи.docx