CISSP For Dummies Flashcards Flashcards by William Boshoff

What is the longest period of time that a business can survive without a critical function?

Maximum tolerable downtime

How well did you know this?

Not at all

Perfectly

To be admissible in a court of law, evidence must be ________________________.

relevant

How well did you know this?

Not at all

Perfectly

____________ monitoring records every key press and mouse movement on a system.

Keystroke

How well did you know this?

Not at all

Perfectly

A ________________ is useful in safeguard selection for determining cost-effectiveness.

cost-benefit analysis

How well did you know this?

Not at all

Perfectly

The process of wrapping protocol information from one layer in the data section of another layer describes .

encapsulation

How well did you know this?

Not at all

Perfectly

Name a type of extinguishing agent that fights fires by separating the elements of the fire triangle rather than simply removing one element.

FM-200

How well did you know this?

Not at all

Perfectly

A system that accumulates knowledge by observing events’ inputs and outcomes is known as a ________________.

neural network

How well did you know this?

Not at all

Perfectly

An IPsec SA consists of what three parameters to uniquely identify it in an IPsec session?

Destination IP address, Security Protocol ID (SPID), Security Parameter Index (SPI)

How well did you know this?

Not at all

Perfectly

Name three VPN protocol standards.

IPsec, PPTP, SSL/TLS

How well did you know this?

Not at all

Perfectly

Name the four main components of a Public Key Infrastructure (PKI).

Certificate Authority (CA), Registration Authority (RA), Repository, Archive

How well did you know this?

Not at all

Perfectly

What type of firewall architecture employs external and internal routers, as well as a bastion host?

Screened-subnet

How well did you know this?

Not at all

Perfectly

What is the required operating state of a network interface on a system running a sniffer?

Promiscuous mode

How well did you know this?

Not at all

Perfectly

Name four Wi-Fi access point infrastructure modes of operation.

Root, repeater, bridge, mesh

How well did you know this?

Not at all

Perfectly

A third-party inspection of a system is known as ________________

an audit

How well did you know this?

Not at all

Perfectly

What is the formula for calculating Annualized Loss Expectancy (ALE)?

SLE x ARO = ALE, where SLE is the Single Loss Expectancy and ARO is the Annualized Rate of Occurrence

How well did you know this?

Not at all

Perfectly

PCI DSS is applicable to organizations that ______________________.

transmit, process, or store payment card information

How well did you know this?

Not at all

Perfectly

What are the four main functions of the operating system?

Process management, I/O device management, memory management, file management

How well did you know this?

Not at all

Perfectly

The decision whether to purchase an emergency generator should be based on the _________________ of electrical power outages.

average and worst-case duration

How well did you know this?

Not at all

Perfectly

The minimum number of SAs required for a two-way IPSec session between two communicating hosts using both AH and ESP is ____________.

four

How well did you know this?

Not at all

Perfectly

An alternative information-processing facility where all systems, patches, and data are mirrored from live production systems is known as a _______________.

hot site

How well did you know this?

Not at all

Perfectly

What is the purpose of a Business Impact Assessment (BIA)?

To describe the impact that an event or disaster will have on business operations

How well did you know this?

Not at all

Perfectly

Masquerading is a ___________ technique.

social engineering

How well did you know this?

Not at all

Perfectly

In a civil case, the court may issue an order, known as a _________________ , allowing a law-enforcement official to seize specific evidence.

writ of possession

How well did you know this?

Not at all

Perfectly

What are two types of risk analysis?

Quantitative, qualitative

How well did you know this?

Not at all

Perfectly

Name four examples of packet-switched WAN protocols.

IP, X.25, Frame Relay, SMDS

Name three types of possible damages in a civil case.

Compensatory, punitive, statutory

A ________________ model ensures that the actions of different objects and subjects aren’t seen by (and don’t interfere with) other objects and subjects on the same system.

noninterference

A prolonged drop in voltage describes what electrical anomaly?

Brownout

What type of water sprinkler system initially has no water present in the pipes and, at activation, delivers a large volume of water?

Deluge

A developer, suspecting that he may be fired soon, modifies an important program that will corrupt payroll files long after he is gone. The developer has created a _________________.

logic bomb

A SYN flood is an example of what type of attack?

Denial-of-service (DoS)

The simple integrity property and star integrity property are defined in which integrity model?

Biba

Name two protocols that can be used to implement one-time passwords.

S/Key and Diameter

Wardriving and port scanning are examples of ___________ tests.

penetration

192.167.4.1 is an example of what class of IP address?

A baseline is what type of governance?

Standard

Viruses, rootkits, and Trojan horses are broadly defined as ______________.

malware

Which Internet specification provides secure e-commerce by using symmetric key systems, asymmetric key systems, and dual signatures?

Secure Electronic Transaction (SET)

Who is the individual responsible for assigning information classification levels to assigned information assets?

Information owner

A system used to monitor and control end -user access to cloud-based services is known as a ________________.

cloud access security broker (CASB)

What are the four basic control requirements identified in the Orange Book?

Discretionary access control, mandatory access control, object reuse, labels

An attacker has placed a URL on a website that, if clicked, will cause malicious JavaScript to execute in victims’ browsers. This attack is known as a ___________ attack.

cross-site scripting

True or false: A signature-based IDS generally reports a high number of false positives.

False

True or false: Bell-LaPadula, Biba, and Clark-Wilson all address availability issues.

False

Filling a system’s hard drive so that it can no longer record data is a type of __________ attack.

denial-of-service (DOS)

Authentication can be based on any combination of what three factors?

Something you know, something you have, something you are

Sensitivity labels are a fundamental component of which type of access control system?

Mandatory

Antimalware software that watches for anomalous behavior uses what technique?

Heuristics

Name three types of intrusion detection systems used for physical security.

Photoelectric sensors, dry contact switches, motion detectors

Which U.S. government data classification level describes information that, if compromised, could cause grave damage to national security?

Top Secret

Most security policies are categorized as what type?

Advisory

To deter casual trespassers, fencing should be a minimum height of ______________ feet.

Name three methods of attack against access control systems

Brute-force, dictionary, buffer overflow

The two types of host or network intrusion detection are ______________ and ________________ .

signature-based systems, anomaly-based systems

Name the four layers of the TCP/IP Protocol Model.

Application, Transport, Internet, Link (or Network)

Name the three elements of the fire triangle necessary for a fire to burn.

Fuel, oxygen, heat

The Ethernet protocol is defined at what layer of the OSI model and in which IEEE standard?

Data Link, 802.3

Which ITSEC classification level is equivalent to TCSEC level B3?

The process of reviewing and approving proposed changes to systems is known as ________________.

change management

What type of cabling should be used below raised floors and above drop ceilings?

Plenum

What is the main reason for establishing an asset classification program?

It isn’t practical to protect all data equally.

What is the main reason for establishing an asset classification program?

It isn’t practical to protect all data equally.

Portable CO2 fire extinguishers are classified as what type of extinguishing system?

Gas-discharge

Electrical fires are classified as what type of fire and use what extinguishing methods?

Class C; CO2 or FM-200

When should management be notified of a computer crime?

As soon as the crime is detected

The LLC and MAC are sublayers of which OSI model layer?

Data Link

A ______________ conveys information by altering stored system data.

covert storage channel

A ___________ conveys information by altering a system resource’s performance or timing.

covert timing channel

Which U.S. government data classification level describes information that, if compromised, could cause serious damage to national security?

Secret

Which PPP authentication protocol transmits passwords in clear text?

Password Authentication Protocol (PAP)

What are the three elements of the C-I-A triad?

Confidentiality, integrity, availability

A system that continues to operate following the failure of a network component describes which type of system?

Fault-tolerant

What term describes the legal evidence-gathering technique of luring an individual toward certain evidence after that individual has already committed a crime?

Enticement

Name three factors that are used to determine data classification.

Value, regulations, policy

True or false: Risk avoidance is considered to be a general remedy for risk.

False

A computer system that alternates execution of multiple subprograms on a single processor describes what type of system?

Multitasking

Name three asymmetric key systems based on discrete logarithms.

Diffie-Hellman, Elliptic Curve, ElGamal

Name four types of intellectual property.

Patents, trademarks, copyrights, trade secrets

Name five protocols that can be used to secure email communication.

SMTP over TLS, S/MIME, MOSS, PEM, PGP

What type of network attack sends TCP packets from a spoofed source address with the SYN bit set?

SYN flood

The Advanced Encryption Standard (AES) is based on what symmetric key algorithm?

Rijndael

The restricted environment that Java applets occupy is known as a _______________.

sandbox

Violation reports and audit trails are examples of what type of control?

Detective technical

A type of cipher that replaces bits, characters, or character blocks with alternate bits, characters, or character blocks to produce cipher text is known as a ______________.

substitution cipher

Name three types of general-purpose controls.

Detective, preventive, corrective

Data on backup media being sent by courier to an off-site storage location is known as what?

Data in transit

The ____________ protocol is used to facilitate user authentication across systems and among organizations through the exchange of authentication and authorization information among organizations.

Security Assertion Markup Language (SAML)

True or false: Failure to implement a safeguard may result in legal liability if the cost of implementing the safeguard is less than the cost of the associated loss.

True

The Clark-Wilson integrity model is based on the concept of a ___________, in which a transaction is sufficiently ordered and controlled that it maintains internal and external consistency.

well-formed transaction

The logic present in an object is known as a ____________ .

method

“A user cannot deny an action” describes the concept of _____________

nonrepudiation

A data network that operates across a large geographic area defines what type of network?

WAN

In biometric systems, what is a False Accept Rate (Type II) error?

Unauthorized users are incorrectly granted access.

Name five types of attacks against voice communication systems.

Identity fraud, toll fraud, eavesdropping, denial-of-service (DoS), Spam over Internet Telephony (SPIT)

The practice of regularly transferring personnel to different positions or departments within an organization is known as ___________.

job rotation

The purpose of session management in a web application is to ________________.

protect sessions from unauthorized access

The total combination of protection mechanisms within a computer system (including hardware, firmware, and software) that’s responsible for enforcing a security policy defines a ______________.

Trusted Computing Base

An address used as the origin for calculating other addresses describes ________________.

base addressing

What is a primary technical concern with long-term audit log retention?

Whether any tape or disk drives will be available to read the media

The most extensive type of disaster recovery plan test is ______________.

an interruption test

Name the four CPU operating states.

Operating (or run), problem (or application), supervisory, wait

CISSP For Dummies Flashcards

Electronic flashcards with book