【单选题】
保密要害部门的新建、改建工程项目，保密防护措施与工程项目建设应当做到___
A. 同计划、同设计、同建设、同验收
B. 同计划、同部署、同检查、同总结
C. 同预算、同设计、同施工、同总结
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
某单位新购置了一批带有无线互联功能的笔记本电脑，准备作为涉密便携式计算机使用，下列做法正确的是___。
A. 将便携式计算机确定涉密等级并粘贴密级标志后作为涉密计算机使用
B. 从便携式计算机的BIOS设置中关闭无线网卡功能
C. 拆除具有无线互联网功能的硬件模块，并采取其它符合国家保密要求的技术防护措施
【单选题】
携带涉密载体参加涉外活动的正确做法是___
A. 经审批后采取保护措施，使涉密载体始终处于自己有效控制范围之内
B. 经过领导批准携带外出的，不必采取保护措施
C. 工作需要携带外出的可以不必经过审批，但事后要备案
【单选题】
关于涉密项目，以下说法错误的是___
A. 绝密级、机密级、秘密级的项目可按照法定程序审批后申请保密专利。
B. 资质单位应当按照资质等级、类别承接涉密信息系统集成业务。
C. 资质单位应当对涉密信息系统集成项目实行全过程管理。
【单选题】
我国对涉密人员采取___的办法。
A. 按职务级别确定涉密人员
B. 以岗定人
C. 以年龄确定涉密人员
【单选题】
工作人员离开办公场所，涉密载体应当___。
A. 随身携带
B. 放在办公桌上
C. 存放在保密设备里
【单选题】
保守国家秘密是我国公民的一项基本___。
【单选题】
在任何情况下，不得向境外传递___秘密载体。
【单选题】
对于被撤销或者注销资质的单位，下列说法不正确的是___。
A. 已签订有效合同的，应立即终止涉密信息系统集成业务。
B. 不得签订新的涉密信息系统集成业务合同。
C. 已签订有效合同的，在保密行政部门监督下可将涉密信息系统集成业务移交其他资质单位。
【单选题】
核心涉密人员的脱密期为___
A. 1年至两年
B. 2年至3年
C. 按照工龄折算
【单选题】
张某被界定为重要涉密人员，2006年3月5日因故被单位解聘，他的脱密期最早于___截止
A. 2006年9月5日
B. 2007年3月5日
C. 2008年3月5日
【单选题】
资质单位出现以下哪种情况，需要撤销资质___。
A. 将涉密信息系统集成业务分包给无相应资质单位的。
B. 法人依法终止的。
C. 《资质证书》有效期满未按规定申请延续的。
【单选题】
对于参与涉密信息系统集成业务的人员，以下说法不正确的是___。
A. 应当参加保密行政管理部门组织的保密知识和技能考试。
B. 应当保守工作中知悉的国家秘密。
C. 取得资质后，相关人员可直接参与到涉密信息系统集成项目中。
【多选题】
应当确定为核心涉密人员的条件是___
A. 了解和掌握涉及绝密级国家秘密的程度深
B. 了解和掌握涉及绝密级国家秘密的事项多
C. 在涉及绝密级国家秘密岗位上工作时间长
D. 在涉及绝密级国家秘密的单位中担任负责后勤保障的领导
【多选题】
有关脱密期正确的是___
A. 核心涉密人员的脱密期为2年至3年
B. 重要涉密人员的脱密期为1年至2年
C. 一般涉密人员的脱密期为半年至1年
D. 属于重要涉密人员的领导干部脱密期为3年至5年
【多选题】
涉密办公自动化设备禁止接入___
A. 涉密计算机和信息系统
B. 单位内部非涉密计算机或信息系统
C. 国际互联网
D. 公共信息系统
【多选题】
关于涉密计算机的使用，以下行为中错误的有___
A. 根据工作需要，可以安装摄像头
B. 可以安装FTP服务器端，面向系统用户提供涉密文档资料下载和上传
C. 在计算机上安装个人硬盘，换成可刻录光驱进行文件的输入输出
D. 使用普通优盘直接连接涉密计算机
【多选题】
下列说法正确的是___
A. 涉密信息系统经本单位保密工作机构测试后即可投入使用
B. 涉密信息系统投入运行前应当经过国家保密行政管理部门审批
C. 涉密计算机重装操作系统后可降为非涉密计算机使用
D. 未经单位信息管理部门批准不得自行重装操作系统
【多选题】
关于国家秘密的保密期限，下列说法正确的是___
A. 国家秘密的保密期限，除另有规定外，绝密级不超过四十年，机密级不超过三十年，秘密级不超过二十年
B. 机关单位应当根据工作的需要，确定具体的保密期限、解密时间或者解密条件
C. 机关单位对工作中需要保密的事项，根据工作需要决定公开的，正式公布时即视为解密
D. 不能确定期限的国家秘密，应当确定解密的条件
【多选题】
下列说法正确的是___
A. 国家秘密载体的制作、收发、传递、使用、复制、保存、维修和销毁，应当符合国家保密规定
B. 绝密级国家秘密载体应当在符合国家保密标准的设施、设备中保存，并指定专人管理
C. 经原定密机关、单位或上级机关批准，可以复制和摘抄
D. 收发、传递和携带外出，应当指定人员负责，并采取必要的安全措施
【多选题】
关于涉密信息系统，下列说法正确的是___
A. 存储、处理国家秘密的计算机信息系统应按照涉密程度实现分级保护
B. 涉密信息系统应当按照国家保密标准配备保密设施、设备
C. 相关保密设备的采购，应当提前与厂商预约或定制
D. 涉密信息系统应当按照规定，经检查合格后，方可投入使用
【多选题】
关于涉密人员管理，下列说法正确的是___
A. 涉密人员应当具备良好的政治素质和品行，具有胜任涉密岗位所要求的能力
B. 有关机关认为涉密人员出境将对国家安全造成危害或者对国家利益造成重大损失的，不得批准出境
C. 涉密人员在脱密期内，应当履行保密义务，不得违反规定就业，不得以任何方式泄露国家机密
D. 涉密人员的合法权益受法律保护
【多选题】
国家秘密的基本范围包括___
A. 国家实务重大决策中的秘密事项
B. 大型央企的商业机密
C. 外交和外事活动中的秘密事项
D. 国民经济和社会发展中的秘密事项
【多选题】
关于涉密人员脱密期，下列说法正确的是___
A. 涉密人员脱密期自当事人向机关、单位提交离岗申请之日起计算
B. 核心涉密人员的脱密期为5年至8年
C. 对特殊的高知密人员，可以依法设定超过规定期限的脱密期
D. 脱密期内，不得到境外驻华机构、组织或者外资企业工作
【多选题】
涉密人员需报告的重大事项有___
A. 与境外人员结婚的
B. 接受境外亲属人员资助的
C. 配偶子女获得境外永久居留资格或者获得外国国籍的
D. 购买境外企业股份及有价债券的
【多选题】
保密工作应当坚持以下哪些原则___
A. 最小化原则
B. 法制化原则
C. 全程化原则
D. 精准化原则
【判断题】
参加涉密会议、活动的人员可以自行委托其他人员代替参加会议。
【判断题】
如有必要，参加涉密会议时可以携带手机和其它无线设备进入会议、活动场所，但需履行审批手续。
【判断题】
涉密工程可以公开招标但需要签订保密协议。
【判断题】
资质单位的法定代表人变动的，应当向作出审批决定的保密行政管理部门报告。
【判断题】
涉密人员脱离涉密岗位3年内不得在境外驻华机构或外商独资企业工作。
【判断题】
涉密人员分为绝密涉密人员、机密涉密人员和秘密涉密人员。
【判断题】
被撤销或者注销资质的单位，自撤销或者注销决定下达之日起，不得签订新的涉密信息系统集成业务合同。
【判断题】
国家秘密事项的保密期限届满即自行解密。
【判断题】
某领导携带涉密优盘参加行业工作会，会议要求报书面材料，因时间紧急，该领导使用涉密优盘连接营业性场所计算机打印了机密级汇报资料，该领导的做法是合理合法的。
【判断题】
因公出差，且两人同行，可以携带密件到购物、餐饮、娱乐等公共场所。
推荐试题
【单选题】
A vSphere Administrator wants to reserve 0.5 Gbps for virtual machines on each uplink on a disturbed switch that has 10 uplinks. What is the quota that should be reserved for the network resource pool?___
A. 10 Gbps
B. 5 Gbps
C. 100 Gbps
D. 0.5 Gbps
【单选题】
A vSphere administrator manages a cluster which includes critical and non-critical virtual machines. The cluster requires different permissions for contractors and non-contractors. How can the administrator exclude the contractor group from some of the critical VMs?___
A. Apply permission for both contractors and non-contractors on the cluster level.
B. Apply permission for both contractors and non-contractors on the cluster level. Remove permission on the critical VMs for contractors.
C. Remove permission for contractors on the cluster level. Apply permission on the critical VMs for noncontractors.
D. Apply permission for both contractors and non-contractors on the VMs. Remove permission on the critical VMs for contractors.
【单选题】
In an ESXi 6.5 cluster only "NFS datastore has running or registered virtual machines" returns. A vSphere HA cluster with four hosts has admission control configured to tolerate one host failure. Which statement is true if a fifth host is added?___
A. CPU and Memory capacity will be set to 50%.
B. CPU and Memory capacity will be set to 30%.
C. CPU and Memory capacity will be set to 25%.
D. CPU and Memory capacity will be set to 20%.
【单选题】
Which command can be run to troubleshoot connectivity problems with vmkernal network interfaces?___
A. esxcli network
B. vmkping
C. net-status
D. vicfg-vmknic
【单选题】
What counter should an administrator check to determine if a virtual machine is ballooning?___
A. swapinRate
B. vmmemctltarget
C. swapped
D. vmmemctl
【单选题】
By default, how often is the vCenter vpx user password automatically changed?___
A. 15 days
B. 60 days
C. 30 days
D. 45 days
【单选题】
Which metric in the Exhibit would identify high latency for a virtual machine operating system?___
A. QAVG/cmd
B. KAVG/cmd
C. DAVG/cmd
D. GAVG/cmd
【单选题】
What VM Monitoring setting would ensure that the failure interval for a virtual machine is defined as 120 seconds?___
A. High
B. Normal
C. Low
D. Medium
【单选题】
The business managers have asked the IT administrator to ensure configuration compliance in the vSphere infrastructure. The IT administrator wants to use Host Profiles to accomplish this, but is unable to do so. Why is the administrator unable to use Host Profiles?___
A. The infrastructure uses a vSphere Standard license.
B. The infrastructure has servers with various CPU families.
C. The user has only the “Administrator” role.
D. Host Profiles apply only to storage settings.
【单选题】
What is the result of a “Consolidate” action on a virtual machine?___
A. All snapshots on the virtual machines will be deleted.
B. The virtual machine will be reverted to its last snapshot.
C. Redundant delta disks will be combined and deleted.
D. A new snapshot with memory state will be created.
【单选题】
A Telco customer is implementing NFV using vSphere as the virtualization platform. Which feature can help achieve a high packet rate with lower CPU consumption?___
A. Network I/O Control
B. SplitRX
C. ERSPAN
D. LACP
【单选题】
What is the VMware-recommended best practice for Fibre Channel zoning?___
A. soft zoning
B. single-initiator-multiple-target zoning
C. single-initiator zoning
D. single-initiator-single-target zoning
【单选题】
How can a vSphere administrator ensure that a set of virtual machines run on different hosts in a DRS cluster?___
A. Use a VM-Host affinity rule.
B. Add the VMs to a vApp.
C. Use a VM-VM affinity rule.
D. Place the VMs in different folders.
【单选题】
vCenter Server Appliance Instance can be backed up using which Client Interface?___
A. vSphere Client Interface
B. vSphere Web Client Interface
C. VMware Host Client Interface
D. Virtual Appliance Management Interface
【单选题】
What tool can capture network traffic at the uplinks, or vSwitch, or virtual port levels?___
A. tcpdump-uw
B. wireshark
C. pktcap-uw
D. pcap
【单选题】
Which storage feature always requires the use of third-party software on ESXi?___
A. Hardware Acceleration for NAS devices
B. VVOL
C. Hardware Acceleration for Block
D. evices
【单选题】
An ESXi host's VMCA-Signed certificate has expired. How can the certificate be renewed?___
A. In the vSphere Web Client, browse to the host in question. Click the Manage tab and select settings. Select System and click Certificate, then click the Renew button.
B. In the vSphere Web Client, browse to the host in question. Click the Manage tab and select settings. Select System and click Certificate, then click the Refresh CA Certificates button.
C. Run the command /sbin/generate-certificates on the affected host.
D. Disconnect the host from vCenter Server and reconnect it.
【单选题】
Which is the correct order for upgrading vSphere components?___
A. vCenter Server, ESXi hosts, VMware Tools, Virtual Machine hardware
B. VMware Tools, Virtual Machine hardware, ESXi hosts, vCenter Server
C. vCenter Server, Virtual Machine hardware, VMware tools, ESXi hosts
D. ESXi hosts, vCenter Server, Virtual Machine hardware, VMware Tools
【单选题】
Which iSCSI initiator type can be used with any network interface card?___
A. Software iSCSI initiator
B. Software FCoE adapter
C. Hardware Independent iSCSI initiator
D. Hardware Dependent iSCSI initiator
【单选题】
An administrator is attempting to power on a virtual machine with 32GB of memory. The operation fails with the following error: <Could not power on VM: No space left on device> <Checking the space on the virtual machine's datastore, there is 30GB free.> Which action would allow the VM to power on?___
A. Set a 2GB memory reservation on the VM.
B. Mount the virtual disk from the affected VM on to another virtual machine and free up space from within the OS.
C. Enable vSphere HD admission control on the cluster in which the VM resides.
D. Set a 2GB memory limit on the VM.
【单选题】
An administrator attempts to manually reclaim space on thin-provisioned VMFS6 volumes but finds that no additional space is being recovered. Which could be causing this?___
A. vSphere 6.5 does not support manual UNMAP.
B. The manual UNMAP operation has been moved to the vSphere web client.
C. The VASA version is use is incompatible.
D. UNMAP is automated for VMFS6.
【单选题】
An administrator has upgraded to vSphere 6.5 and also wants to use Kerberos authentication for NFS. Which can be done to the existing NFSv3 volumes to enable this feature?___
A. Perform a storage rescan on VMFS volumes.
B. Unmount the NFSv3 datastore, and then mount as NFSv4.1 datastore.
C. Nothing. All NFSv3 mounted datastores are upgraded automatically during vSphere upgrades.
D. Perform a scan of new storage devices.
【单选题】
An administrator wants to restore the vCenter Server Appliance 6.5 from backup. Where can this be accomplished?___
A. from the ESXi Host Client
B. from the VMware vSphere Appliance Management Interface
C. from within the VMware vSphere Web Client
D. from the vCenter Server Appliance Installer
【单选题】
The administrator wants to power on VM-K2, which has a 2GHz CPU reservation. VM-M1, VM-M2, and VM-K1 are all powered on. VM-K2 is not powered on. The exhibit shows the parent and child resource reservations. If Resource Pool RP-KID is configured with an expandable reservation, which statement is true?___
A. VM-K2 will be unable to power on because there are insufficient resources.
B. VM-K2 will be able to power on since resource pool RP-KID has 2GHz available.
C. VM-K2 will be unable to power on because only 2GHz are reserved for RP-KID.
D. VM-K2 will receive resource priority and will be able to power on this scenario.
【单选题】
Which is the block size on the VMFS6 datastore?___
A. All small and large file blocks are 8MB.
B. All small and large file blocks are 1MB.
C. Small file blocks are 512KB. large file blocks are 64MB.
D. Small file blocks are 1MB, large file blocks are 512MB.
【单选题】
When installing vCenter Converter Standalone, why must an administrator perform a client-server installation instead of a local installation?___
A. to manage conversion tasks remotely
B. to convert virtual machines as well as physical machines
C. to allow installation of the Converter agent on remote source machines
D. to hot clone physical or virtual machines
【单选题】
Which is required by vCenter Converter Standalone to convert a physical Red Hat Enterprise Linux 7 machine to a virtual machine?___
A. The Linux machine must be powered off.
B. The Linux machine must have the SSH daemon started.
C. The Linux machine must use a static IP address.
D. The Linux machine must have a fully-qualified domain name.
【单选题】
An administrator is troubleshooting network communications between a vCenter Server and an ESXi 6.5 host. Which log shows the related events between these components?___
A. /var/log/fdm.log
B. /var/log/vpxa.log
C. /var/log/hostd.log
D. /var/log/auth.log
【单选题】
An administrator has recently upgraded from vSphere 6.0 to 6.5, and can no longer see the software iSCSI named vmhba33. Which could be the reason for this?___
A. The upgrade has changed the vmhba name.
B. vSphere 6.5 automates iSCSI configurations.
C. vSphere 6.5 no longer supports software iSCSI.
D. The upgrade has deleted the vmhba.
【单选题】
An administrator is trying to vMotion a VM from his datacenter to a recovery site. Which is the maximum allowed RTT (Round-Trip Time) latency between source and destination host?___
A. 100 milliseconds
B. 150 milliseconds
C. 15 milliseconds
D. 10 milliseconds
【单选题】
Which is required for configuring iSCSI Software Adapter network port binding?___
A. VMkernel of the iSCSI traffic must be load balanced using Route based on IP Hash algorithm.
B. VMkernel of the iSCSI traffic must be load balanced using Route based on Source Virtual Port ID algorithm.
C. VMkernel of the iSCSI traffic must be load balanced using Route based on Source MAC Hash algorithm.
D. VMkernel of the iSCSI traffic must be bound to only one active network adapter.
【单选题】
In vSphere Data Protection 6.1, which is the function of a Backup Verification job?___
A. None. Backup Verification job is not a feature of vSphere Data Protection
B. It is a manual task -Power it on -Verify the guest OS -Check started applications
C. It is an automatic process -Restore a virtual machine -Power it on -Verify that the guest OS is booted by communicating with the Backup Verification agent
D. It is an automatic process -Restore a virtual machine -Power it on -Verify that the guest OC is booted by detecting the VMware ToolsTM "heartbeats"
【单选题】
An administrator has enabled vSphere Distributed Switch Health Check. The hosts connected to that Distributed Switch all display an alert:< vSphere Distributed Switch MTU supported status > .The administrator has all of the VMkernel ports MTU sizes set to 1600. Which action will remedy this problem?___
A. Configure the Distributed Switch to MTU 9100.
B. Disconnect and reconnect the physical network cable.
C. Configure the physical switch to MTU 1600.
D. Disable the Distributed Switch MTU.
【单选题】
Which Host Profile Subprofile configuration is used to configure firewall settings for ESXi hosts?___
A. Advanced Configuration Settings
B. General System Settings
C. Security
D. Networking
【单选题】
Where would a vSphere administrator find general vCenter Server logs on a vCenter Server Appliance?___
A. /var/log/vmware/vpxd/
B. /var/log/messages
C. /etc/vmware-vpx/
D. /var/log/vmware/vsan-health/
【单选题】
An administrator wishes to enable network port mirroring based on source port. Which feature should be enabled?___
A. vSphere standard switch port
B. ERSPAN
C. NSX Virtual Wire
D. VLAN
【单选题】
Which CLI command shows the physical uplink status for a vmnic?___
A. esxcli network ip connection list
B. esxcli network ip neighbor list
C. esxcli network nic get
D. esxcli network nic list
【单选题】
Which is the maximum number of block devices (LUNs) that are supported by ESXi hosts that are running version 6.5?___
A. 1024
B. 512
C. 2048
D. 256
【单选题】
When performing a vCenter Server 5.5 for Windows with Microsoft SQL Server Express database migration to vCenter Server Appliance 6.5, which will be the target database?___
A. Microsoft SQL Server Express 2012R2
B. Microsoft SQL Server Standard 2012R2
C. PostgreSQL
D. Oracle DB 11g
【单选题】
An administrator has multiple vCenter Server 6.5 systems but cannot enable Storage I/O Control (SIOC) on a datastore shared by ESXi hosts managed by the vCenter Server systems. Which action should the administrator take to resolve the issue?___
A. Unmount the datastore and then enable SIOC on the vCenter Server system.
B. Configure the datastore to be managed by a single vCenter Server system.
C. Configure Storage DRS and then enable SIOC on the vCenter Server system.
D. Enable Raw Device Mapping (RDM) on the
E. SXi hosts.
