Test
CyberSecurity Week 3 Practice Test
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (22)
1What is the final step in authorizing a system for use in an environment?
- ACertification
- BB. Security evaluation and rating
- CC. Accreditation
- DVerification
2What feature enables code to be executed without the usual security checks?
- ATemporal isolation
- BMaintenance hook
- CRace conditions
- DProcess multiplexing
3If a component fails, a system should be designed to do which of the
following?- AChange to a protected execution domain
- BChange to a problem state
- CChange to a more secure state
- DRelease all data held in volatile memory
4Which is the first level of the Orange Book that requires classification labeling
of data?- AB3
- BB2
- CB1
- DC2
5The Information Technology Security Evaluation Criteria was developed for
which of the following?- AInternational use
- BU.S. use
- CEuropean use
- DGlobal use
6A guard is commonly used with a classified system. What is the main purpose
of implementing and using a guard?- ATo ensure that less trusted systems only receive acknowledgments and not
messages - BTo ensure proper information flow
- CTo ensure that less trusted and more trusted systems have open
architectures and interoperability - DTo allow multilevel and dedicated mode systems to communicate
- ATo ensure that less trusted systems only receive acknowledgments and not
7The trusted computing base (TCB) contains which of the following?
- AAll trusted processes and software components
- BAll trusted security policies and implementation mechanisms
- CAll trusted software and design mechanisms
- DAll trusted software and hardware components
8What is the imaginary boundary that separates components that maintain
security from components that are not security related?- AReference monitor
- BSecurity kernel
- CSecurity perimeter
- DSecurity policy
9Which model deals only with confidentiality?
- ABell-LaPadula
- BClark-Wilson
- CBiba
- DReference monitor
10What is the best description of a security kernel from a security point of view?
- AReference monitor
- BResource manager
- CMemory mapper
- DSecurity perimeter
11In secure computing systems, why is there a logical form of separation used
between processes?- AProcesses are contained within their own security domains so each does
not make unauthorized accesses to other processes or their resources. - BProcesses are contained within their own security perimeter so they can
only access protection levels above them. - CProcesses are contained within their own security perimeter so they can
only access protection levels equal to them. - DThe separation is hardware and not logical in nature.
- AProcesses are contained within their own security domains so each does
12What type of attack is taking place when a higher-level subject writes data to a
storage area and a lower-level subject reads it?- ATOC/TOU
- BCovert storage attack
- CCovert timing attack
- DBuffer overflow
13What type of rating is used within the Common Criteria framework?
- APP
- BEPL
- CEAL
- DA-D
14Which best describes the *-integrity axiom?
- ANo write up in the Biba model
- BNo read down in the Biba model
- CNo write down in the Bell-LaPadula model
- DNo read up in the Bell-LaPadula model
15Which best describes the simple security rule?
- ANo write up in the Biba model
- BNo read down in the Biba model
- CNo write down in the Bell-LaPadula model
- DNo read up in the Bell-LaPadula model
16Which of the following was the first mathematical model of a multilevel
security policy used to define the concepts of a security state and mode of
access, and to outline rules of access?- ABiba
- BBell-LaPadula
- CClark-Wilson
- DState machine
17Which of the following is a true statement pertaining to memory addressing?
- AThe CPU uses absolute addresses. Applications use logical addresses.
Relative addresses are based on a known address and an offset value. - BThe CPU uses logical addresses. Applications use absolute addresses.
Relative addresses are based on a known address and an offset value. - CThe CPU uses absolute addresses. Applications use relative addresses.
Logical addresses are based on a known address and an offset value. - DThe CPU uses absolute addresses. Applications use logical addresses.
Absolute addresses are based on a known address and an offset value.
- AThe CPU uses absolute addresses. Applications use logical addresses.
18Which of the following is an incorrect description pertaining to the common
components that make up computer systems?
i. General registers are commonly used to hold temporary processing data,
while special registers are used to hold process characteristic data as in
condition bits.
ii. A processer sends a memory address and a “read” request down an address
bus and a memory address and “write” request down an I/O bus.
iii. Process-to-process communication commonly takes place through memory
stacks, which are made up of individually addressed buffer locations.
iv. A CPU uses a stack return pointer to keep track of the next instruction sets it
needs to process.- Ai
- Bi, ii
- Cii, iii
- Dii, iv
19Mark is a security administrator who is responsible for purchasing new
computer systems for a co-location facility his company is starting up.
The company has several time-sensitive applications that require extensive
processing capabilities. The co-location facility is not as large as the main
facility, so it can only fit a smaller number of computers, which still must
carry the same processing load as the systems in the main building. Which of
the following best describes the most important aspects of the products Mark
needs to purchase for these purposes?- ASystems must provide symmetric multiprocessing capabilities and
virtualized environments. - BSystems must provide asymmetric multiprocessing capabilities and
virtualized environments. - CSystems must provide multiprogramming multiprocessing capabilities and
virtualized environments. - DSystems must provide multiprogramming multiprocessing capabilities and
symmetric multiprocessing environments.
- ASystems must provide symmetric multiprocessing capabilities and
20Use the following scenario to answer Questions 21–23. Tom is a new security manager who
is responsible for reviewing the current software that the company has developed internally.
He finds that some of the software is outdated, which causes performance and
functionality issues. During his testing procedures he sees that when one program stops
functioning, it negatively affects other programs on the same system. He also finds out
that as systems run over a period of a month, they start to perform more slowly, but by
rebooting the systems this issue goes away. He also notices that the identification, authentication,
and authorization steps built into one software package are carried out by
individual and distinct software procedures.
Which of the following best describes a characteristic of the software that may
be causing issues?- ACooperative multitasking
- BPreemptive multitasking
- CMaskable interrupt use
- DNonmaskable interrupt use
21Use the following scenario to answer Questions 21–23. Tom is a new security manager who
is responsible for reviewing the current software that the company has developed internally.
He finds that some of the software is outdated, which causes performance and
functionality issues. During his testing procedures he sees that when one program stops
functioning, it negatively affects other programs on the same system. He also finds out
that as systems run over a period of a month, they start to perform more slowly, but by
rebooting the systems this issue goes away. He also notices that the identification, authentication,
and authorization steps built into one software package are carried out by
individual and distinct software procedures.
Which of the following best describes why rebooting helps with system
performance in the situation described in this scenario?- ASoftware is not using cache memory properly.
- BSoftware is carrying out too many mode transitions.
- CSoftware is working in ring 0.
- DSoftware is not releasing unused memory.
22Use the following scenario to answer Questions 21–23. Tom is a new security manager who
is responsible for reviewing the current software that the company has developed internally.
He finds that some of the software is outdated, which causes performance and
functionality issues. During his testing procedures he sees that when one program stops
functioning, it negatively affects other programs on the same system. He also finds out
that as systems run over a period of a month, they start to perform more slowly, but by
rebooting the systems this issue goes away. He also notices that the identification, authentication,
and authorization steps built into one software package are carried out by
individual and distinct software procedures.
What security issue is Tom most likely concerned with in this situation?- ATime of check\time of use
- BMaintenance hooks
- CInput validation errors
- DUnauthorized loaded kernel modules
Información
- Descripción
- CyberSecurity CISSP Test sobre CyberSecurity Week 3 Practice Test, creado por Eric Booker el 27/06/2018.
- Autor
- Eric Booker
- Idioma
- English
- Visitas
- 6
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test