CISSP questions

Question 1

What type of attack tries to take dav gage of sequence of events as system performs common tasks?

Answer 1

Time-of-check vs time-of-use attack

Question 2

Can an expired digital certificate be renewed?

Answer 2

No

Question 3

What types of attack send malformed packets to the intended victim.

Answer 3

tear drop attack (fragmented packets)
ping of death (huge ICMP)
winnuke (TCP with URGent flag set)
IP/IGMP null payload
christmas tree attack (TCP with all flags set)

Question 4

What is an intrusive smart card attack in which the card is physically manipulated until the ROM chip can be accessed?

Answer 4

Micro probing

todo

Question 5

Which function is compatible with systems administration in a segregated environment?

Answer 5

Quality Assurance

todo

Question 6

What is the process of identifying, controlling and auditing changes to the Trusted Computing Base?

Answer 6

Configuration Management

todo

Question 7

What is the primary purpose of Torino and Tribal Flood Network?

Answer 7

To launch a DDoS attack

Question 8

How many keys and digital certificates are required by SET (Secure Electronic Transaction)?

Answer 8

todo

Question 9

MD5 hash length

Answer 9

128 bits