Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CISSP > Domain 1 and Test Sudy 1 > Flashcards

Domain 1 and Test Sudy 1 Flashcards

1
Q

What are the three levels/types of authentication?

A

Type 1 - Something you know
Type 2 - Something you have
Type 3 - Something you are

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What contract is based upon connecting disparate business networks together?

A

ISA

Interconnect service agreement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which authentication protocol is deprecated because of vulnerabilities?

A

LEAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the Defined step in CMMI?

A

Processes characterized for the organization and is proactive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What part of an SDN is responsible for the routing of data?

A

Control plane.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What part of an SDN determines how to handle incoming packets?

A

Data plane.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

When discussing platforms, what is SoC?

A

System on a chip, a sophisticated, embedded system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are some regulatory standards?

A

GDPR, HIPAA, GLBA, SOX, PIPEDA, COPPA, FISMA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are two advantages of high level programming languages?

A

Human readable syntax and it is easier to enforce coding standards because there is a specific order to that syntax.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is PEAP?

A

A Microsoft favored package protected by TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Describe trademark

A

Trademark is the exclusive right to use symbols, words, colors, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In contracts what is an OLA?

A

Operating level agreement. This defines the interdependent relationships in support of an SLA. Describes the responsibilities of each support group towards other support groups, and includes timeframes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What CMMI level focuses on continuous process improvement?

A

Optimizing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What attack allowed Linux OS command injection?

A

Shellshock.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Initial in CMMI?

A

Processes are inconsistent, not organized, reactive, poorly managed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the common tenets of privacy law?

A 
NPSLARSD 
Notification
Participation
Scope
Limitation
Accuracy
Retention
Security
Dissemniation

or DRSSLAPN
Dissemination
Retention
Scope
Security
Limitation
Accuracy
Participation
Notificiation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is SASL?

A

Simple authentication and securtiy layer, a directory access protocol that can implement a wide variety of authentication methods.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which authentication protocol uses a secure tunnel but does not distribute certificates?

A

EAP-TTLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are four industry standards?

A

ISO, CSA Star, Uptime Institute, SSAE 16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are STRIDE, VAST, OCTAVE, and Trike?

A

Threat modeling techniques.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are three main tenets of Clark-Wilson?

A

Prevent unauthorized users form making changes, prevent authorized users from making improper changes, and maintaining consistency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Optimizing in CMMI?

A

Focus on continuous process improvement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What CMMI level are processes characterized for the organization and is proactive?

A

Defined.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What CMMI level are processes measured and controlled?

A

Quantitatively managed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is MAD
Maximum allowable downtime - the maximum time until the business is non viable. Also known as MTD
26
What is an XML based protocol that can provision services and user accounts?
SPML
27
What is unit testing?
A method by which small, individual units and components are verified.
28
What is the difference between US Code and Code of Regulations?
Code of regulations is administrative law, where US Code are laws enacted by congress. Code of regulations are based on US Code.
29
Which directory access can implement a wide variety of authentication methods?
SASL | Simple authentication and security layer
30
What CMMI level is inconsistent processes, not organized, reactive, and poorly managed?
Initial
31
What is a fuzzing tool that offers both dumb and intelligent techniques?
Peach Fuzzer
32
What is EAP-FAST?
LEAP successor using a protected tunnel by Cisco.
33
What is Heartbleed?
An attack on OpenSSL that allows for the reading of memory.
34
What is scoping in risk management?
Selecting controls that are applicable to a given asset.
35
What is an embedded system that is quite sophisticated?
SoC or System on a Chip
36
What is the difference in cohesion and coupling?
Cohesion refers to methods that are similar and belong together. Coupling refers to the degree to which methods are dependent on other methods or modules.
37
In contracts, what is an MSA?
Master services agreement. An agreement that will govern future transactions.
38
Which IP protection is best for a new logo?
Trademark
39
What is a CPU level vulnerability that let an application read outside of its protected area?
Meltdown
40
What is an attack against SSLv3 that allows an attacker to decrypt traffic in flight?
POODLE
41
Which biometric type is not considered very accurate, regardless of health?
Hand Geometry
42
What is assessing in risk management?
Verifying that controls are functional.
43
What CMMI level are processes focused on basic project management and reactive?
Managed or Repeatable
44
What is CPE?
Common platform enumeration.
45
What type of contract deals with future transactions?
MSA | Master services agreement
46
Which IP protection is best for a new idea?
Patent
47
What is the P12 certificate format?
PKCS 12 or P12 can contain both public and private keys as a single, encrypted file.
48
What is something may exploit a vulnerability and creates risk?
A threat.
49
Which IP protection is best for creative works?
Copyright
50
In contracts, what is an ISA?
Interconnection services agreement. A business contract between organizations for the purpose of interconnecting their networks.
51
What describes timeframe for delivery of services among support groups?
OLA | Operating level agreement.
52
What is EAP-TTLS?
EAP Tunnled TLS, doesn't require signed certificates.
53
What is the CMMI?
Capability Maturity Model Integration
54
What is EAP-TLS?
EAP for requiring client side certificates and assumes users will reject untrusted certificates.
55
What are the parts of an SDN?
Control plane and data plane. Control plane relates to the networking components responsible for routing of data, data plane is the component that determines how to forward or process inbound packets.
56
What is NIST 800-137
Continuous Security Monitoring
57
What are the two CISCO created authentication protocols?
LEAP, EAP-FAST
58
What is Meltdown?
A CPU level vulnerability that allowed one application to read outside of its protected area to others.
59
What is SPML?
Services provision markup langauge, an XML based protocol capable of provisioning services.
60
What network type is defined via code instead of hardware?
SDN | Software defined network.
61
In contracts what is an MOU?
A nonbinding agreement between two or several parties that expresses a common line of action but does not imply a legal commitment, a form of a gentleman's agreement.
62
What is a certificate format to store both public and private keys as a single file?
PKCS 12 or P12
63
What is a Microsoft favored credential package that is protected by TLS?
PEAP
64
What is Managed or Repeatable in CMMI?
Processes are focused on basic project management and still reactive.
65
What is adherence to a mandate?
Compliance
66
What is an attack that allows for the reading of memory?
Heartbleed
67
What is ShellShock?
A Linux attack that would allow OS command injection?
68
What is an area of storage not fully used by a file?
Cluster tip
69
What is Categorizing in risk management?
Describing, examining, and identifying a system. It is also assining a security role.
70
Which authentication protocol uses certificate exchanges to secure credentials?
EAP-TLS
71
Describe patents.
Patents protect new, original ideas or inventions.
72
What is a vulnerability?
Something that could be exploited
73
What type of contract is nonbinding and expresses a common line of action between two or more groups?
MOU | Memorandum of understanding
74
What is the smallest possible part of software testing?
Unit testing
75
What are the parts of STRIDE, and who made it?
``` Microsoft made it, Spoofing identity Tampering with data Repudiation Information Disclosure DOS Elevation of privelege ```
76
Which authentication protocol encapsulates credentials inside a TLS envelope?
PEAP
77
What is SLA and what does it mean?
Service Level Agreement | Defines the minimum requirements.
78
What is Tailoring in risk management?
Customizing selected controls to meet specific needs.
79
What is an SDN?
Software defined Network - network connections are defined through code.
80
What is the term for acting on a vulnerability?
Exploit
81
What is the POODLE attack?
An attack against SSLv3 decrypting traffic in flight.
82
What is VAST?
Visual agile and simple threat modeling that promotes its use across the entire infrastructure.
83
What is the term for how an organization is managed?
Governance
84
What is a standards based system and software inventory system?
CPE
85
What is a cluster tip?
An area not fully utilized by a file, often used for stegonography
86
In contracts, what is an MOA?
Memorandum of agreement, describes a cooperative relationship to work on a project together.
87
What are the traits that DRM should have?
``` ICPDA Interoperability Continous audit trail Persistency Dynamic Policy Control Automatic Expiration ```
88
What is Quantitatively Managed in CMMI?
Processes are measured and controlled.
89
What is LEAP
Cisco made authentication protocol, it is deprecated because of vulnerabilities.
90
What is Selecting in risk management?
Identifying controls that apply to your assets.
91
Describe copyright.
Copyright protects the representation of ideas, creative works.
92
What type of contract deals with cooperatively working on a project?
MOA | Memorandum of understanding.
93
What is the NIST standard for continuous monitoring?
NIST 800-137

CISSP (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions