Sample Test Questions Domain 3

Question 1

the ___ is the most widely used standard for evaluating security attributes of computer systems

Answer 1

Common Criteria

Question 2

With preemptive multitasking, used in Windows 9x and later versions and in Unix systems, the ___ controls how long a process can use a resource

Answer 2

operating system

Question 3

A security issue with using virtual swap space is that ___

Answer 3

two or more processes use the same resource and the data could be corrupted or compromised

Question 4

The reference monitor is an access control concept that is implemented and enforced by the ___ via the hardware, software, and firmware

Answer 4

security kernel

Question 5

___ takes place when a CPU needs to move between executing instructions for a highly trusted process to a less trusted process or vice versa.

Answer 5

Execution domain switching

Question 6

The ___ model addresses how access rights between subjects and objects are defined, developed, and integrated

Answer 6

Graham-Denning

Question 7

A ___ is a countermeasure against memory leaks. It is software that runs an algorithm to identify unused committed memory and then tells the operating system to mark that memory as “available.”

Answer 7

garbage collector

Question 8

The memory manager has five basic responsibilities:

Answer 8

1. protection
2. sharing
3. relocation
4. local organization
5. physical organization

Question 9

the Common Criteria begins with a ___, which contains the set of security requirements, their meaning and reasoning, and the corresponding EAL rating that the intended product will require.
The ___, is the actual product that is being evaluated against the Common Criteria.
The ___ is the vendor’s written explanation of the security functionality and assurance mechanisms that meet the needed solution

Answer 9

Protection Profile;
target of evaluation (ToE);
security target

Question 10

___ has the goal of internationally standardizing the use of system architecture so that product developers don’t have to improvise and come up with their own individual approaches

Answer 10

ISO/IEC 42010

Question 11

The ___ programming language is susceptible to buffer overflow attacks because some of its commands allow for direct pointer manipulations to take place

Answer 11

C

Question 12

In the ___ architecture, a reduced amount of code is running in kernel mode carrying out critical operating system functionality

Answer 12

microkernel

Question 13

A ___ is when the CPU has to change from processing code in user mode to kernel mode. This is a protection measure, but it causes a performance hit because all of the information on the new process has to be loaded into the registers for the CPU to work with

Answer 13

mode transition

Question 14

___ and ___ can be used to ensure a clean and smooth distribution of power

Answer 14

Voltage regulators; line conditioners

Question 15

The goal of ___ is to make criminals feel uncomfortable by providing many ways observers could potentially see them and to make all other people feel safe and comfortable, by providing an open and well-designed environment

Answer 15

natural surveillance

Question 16

Class D fires mean something ___ is on fire

Answer 16

metal (or “medal”)

Question 17

The ___ category of security controls in a physical security program pertains to how various situations will be assessed, triaged, and dealt with

Answer 17

assessment

Question 18

When a heavy electrical device is turned on, it can draw a large amount of current, which is referred to as ___

Answer 18

in-rush current

Question 19

in steganography, The ___ is a signal, data stream, or file that has hidden information (the payload) inside of it, the ___ is the file format in which the information is hidden

Answer 19

carrier; stegomedium

Question 20

in a PKI system, the ___ confirms the individual’s identity, and the ___ creates, maintains and signs the digital certificate

Answer 20

RA (Registration Authority); CA (Certificate Authority)

Question 21

in Trusted Platform Module implementation, ___ a hard disk drive is where the decryption key that can be used to decrypt data on the drive is stored on the TPM. ___ is when data pertaining to the system’s state is hashed and stored on the TPM, enabling verification of the hardware and software configuration.

Answer 21

“Binding”; “sealing”

Question 22

MACs are a result of hashing a message, whereas HMACs are a result of hashing both the message and ___, which provides some authentication but not the non-repudiation of a digital signature

Answer 22

a shared secret key

Question 23

in distributed systems, smaller intermediate distribution facilities (IDFs) and storage facilities are commonly less well protected physically even though they ___

Answer 23

contain data as critical as the data in main distribution facilities (MDFs) and data centers