ISC2 Information Systems Security Architecture Professional 試験対策問題集

模擬試験モードの設定

上記は本サイトの模擬試験モードの設定値です。実際の試験の出題数・制限時間・合格基準は、各認定プログラムの公式サイトでご確認ください。

出題分野

• Governance, Risk, and Compliance (GRC)（統治・リスク・順守）（出題比率 21%）
• Security Architecture Modeling（設計のモデル化）（出題比率 22%）
• Infrastructure and System Security Architecture（基盤設計）（出題比率 32%）
• Identity and Access Management (IAM) Architecture（識別と認可）（出題比率 25%）

フリー問題

1. A team lists four inputs to the security requirements of a new patient portal: a…
2. A processor that handles customer records intends to move part of the work to a …
3. A national retailer is designing a new architecture that will store cardholder a…
4. A company cannot reduce the financial impact of a rare but severe outage through…
5. A team must ensure that no category of threat is skipped for a new interface, in…
6. A security team subscribes to a feed describing which techniques are currently b…
7. A payment flow is decomposed into independently deployed services that other bus…
8. A cloud scoped architecture must state which security responsibilities the provi…
9. During a threat modeling session the team notes that a trader can later deny hav…
10. A campus has one fence, one staffed lobby and one card reader on the door of the…
11. Two business units each run their own provider account and now need to share one…
12. Drives holding regulated data must be returned to the supplier under warranty. T…
13. A plant network must send read-only measurements to the corporate analytics plat…
14. A statute requires that a registry of citizen records never leave the national t…
15. A plant's emergency shutdown logic must still act correctly when the corporate n…
16. The architect must select a combination that genuinely constitutes multi-factor …
17. A service must raise the authentication requirement only when the circumstances …
18. In a ticket based authentication design, a workstation presents derived credenti…
19. The architect must decide which of four situations genuinely requires in-person …
20. A design must decide access at request time using the requester's department, th…