Employees visit illegal or malicious websites at will Viruses, Trojans, and worms will be attacked, so we need to enable URL filtering. Which of the following options is a feature of URL Shopping?

• A. Control in the domain name resolution stage, control the granularity Control can only be done down to the domain name level
• B. Control is performed during the URL request phase of making HTTP/HTTPs Fine control granularity Can be controlled down to the directory and file level
• C. The impact on performance is small And all services corresponding to the domain name can be controlled
• D. Great impact on performance However, only HTTP/HTTPS access is controlled

Log formats are diverse At present, there is no unified log format standard in the world, and different manufacturers have formulated corresponding log formats (single selection) according to their own needs

• A. FALSE
• B. TRUE

The following describes the differences between ISMS and graded protection What are the correct options? (multiple selection).

• A. The construction result of 1SMS is to establish a set of ISMS system documents for the organization Strongly strengthen the Organization's information security, and the result of the rating assessment is to give whether the subject meets the stated security level requirements.
• B. The complete implementation process of ISMS runs through the entire life cycle of the information system The complete implementation process of graded protection runs through the entire life cycle of the management system of the organization or a specific scope of the organization , and can be synchronized with the management system of a specific scope of the organization or organization. It can also be carried out on the basis that its management system has been established.
• C. The implementation objects of graded protection are mainly those of various enterprise units, while the implementation objects of ISMS are mainly government departments such as party and government organs at all levels that have the requirements of information system levels.
• D. The graded protection system is a basic system for ensuring information security Both technology and qualifications are taken into account The focus is on how to leverage existing sophisticated protection critical information systems It mainly reflects the classification of hierarchies Protect the idea of focus. While ISMS is mainly from the perspective of security management The focus is on the establishment of information security guidelines, policies and security management systems and security management organizations within the organization or its specific scope, and their effective implementation, which mainly reflects the role and importance of security management.

On the principle of defense against trapping Which of the following is described as incorrect=

• A. By deceiving network detection activities, fake resources are displayed, so that attackers cannot discover real system information and vulnerabilities
• B. Trapping systems discover and block attacker attacks
• C. Interference Attack Gathering System Information diaphragmatic weakness determination" process, inducing the attacker to expose the intention
• D. Interact with the attack campaign to confirm the intent and discover the attacker before the breach occurs

The following description of information security training Which items are correct? (multiple selection).

• A. In terms of training method For most employees, just one induction training is not enough attention, and frequent email campaigns are needed to raise awareness of information security
• B. Even for safety training, the focus will be different for different departments.
• C. In terms of training content For senior executives, training on information security strategies and information security laws and regulations is required.
• D. For grassroots employees, some safety technology training should be emphasized.