GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

CISSP General Practice Questions

Dani B English 71 cards

Cards in this deck (71)

  1. 1What is the first priority in any business continuity?Ensuring the personal safety for everyone
  2. 2SMPTP, POP3, PEM and IMAP. Which of the above is not a protocol used by the standard Internet email system?Privacy Enhanced Mail (PEM) is not a standard Internet email protocol; it is an add-on encryption mechanism.
  3. 3What is a device that attempts to route first but will bridge if routing fails?A brouter
  4. 4What is a data object passed from Transport layer to the Network layer called when it reaches the Network layer?A data object is called a datagram in the Network Layer.
    It is called a PDU in layers 5 to 7.
    It is called a segment in the Transport layer.
    And called a frame in the Data Link layer.
  5. 5What protocol is utilized by attackers launching a smurf attack against a network?The smurf attack depends on ping packets which are implemented by the Internet Control Message Protocol (ICMP)
  6. 6The user, data owner, data custodian or admin. Which security role is ultimately responsible for due diligence in protecting a company's data?The data owner has final corporate responsibility for the protection and storage of data.
    Owners need to perform due diligence in establishing and enforcing security policy to sustain and protect sensitive data.
  7. 7The term personal area network is most closely associated with what wireless technology?802.15 (aka Bluetooth)
  8. 8Education, awareness, training or certification. Which of the above elements of teaching is considered a prereq for the others?Awareness must be established before training can take place
  9. 9C++, VBScript, Java or Fortran. Which of the following is an example of an interpreted language?VBScript is the only example of an interpreted language.
    The others are compiled languages.
  10. 10Smurf attack, spamming attack, teardrop attack or land attack. An amplification network is used to wage a DoS attack in which of the following?A smurf attack occurs when an amplifying server or network is used to flood a victim with useless data.
  11. 11Which type of access control is governed by a set of admin-defined filters and is commonly found in firewall systems?Rule-based access controls.
    They define specific functions for access to requested objects.
  12. 12What type of attack includes fragmented packets that cannot be reasseembled?Teardrop attack
  13. 13What is the primary function of a gateway as a network device?The gateway is a network device or service that works at the Application layer that serves as a protocol translation tool.
  14. 14Which type of control provides extended options to existing controls and aids or supports administrative security policy?Compensation access control
  15. 15Biometric authentication devices fall under what top-level authentication factor type?Biometric authentication devices represent a Type 3 (something you have) authentication factor
  16. 16On what port do DHCP clients request a config?Dynamic Host Config Protocol (DHCP) uses port 68 for client request broadcast and port 67 for server point-to-point response.
  17. 17What is risk?Risk is the likelihood that any specific threat will exploit a vulnerability to cause harm to an asset.
  18. 18Top-down or bottom-up. What is the recommended management approach to security?The approach to security management must be a top-down approach to be effective. Upper or snr mgmt is responsible for initiating and defining policies for the organization.
  19. 19What is the min no of keys that can be used to implement 3DES encryption?Two. 3DES requires either two or three keys to generate an effective key strength of 168 bits, triple the strength of standard DES's 56-bit key.
  20. 20What is a component or element of IPSec that provides authentication, integrity and nonrepudiation?An authentication header
  21. 21Regular user accounts, auditor accounts, privileged accounts or all equal. When performing access review audits, which type of account is the most important to audit?Privileged accounts are granted the most access and should be a primary focus in an access review audit.
  22. 22What is the cardinality of a database table?The cardinality of a database is the number of records in the table
  23. 23What frequency does an 802.11n-compliant device employ?802.11n can use the 2.4 GHz and 5GHz frequencies.
    (The 2.4 GHz frequency is also used by 801.11g and 802.11b)
  24. 24What is the determining factor to whether a security effort will be successful?Senior management
  25. 25What is the maximum key length supported by the AES/Rijndael encryption algorithm?256 bits.
    The AES/Rijndael algorithm is capable of operating with 128-. 192- or 256-bit keys.
  26. 26During the deencapsulation procedure, which layer strips its information and sends the message up to the Network layer?The Data Link layer
  27. 27In a discussion of high-speed telco links or network carrier services, what does fault tolerance mean?Fault tolerance means to have redundant connections
  28. 28The loss of signal strength and integrity over distance on a cable is known as?Attenuation
  29. 29What type of malicious code uses a filename similar to that of a legit system file?Companion viruses
  30. 30What port is used by TLS to provide secure web connection?443
  31. 31From which pool of keys is the primary key for a particular table selected?Candidate keys
  32. 32What law makes it a crime to cause malicious damage to a "federal interest" computer?Amendments to the Computer Fraud and Abuse Act criminalized damage to federal systems, federal interest systems and computers involved in interstate commerce.
  33. 33Which BCP documentation would provide procedures for notifying executives of a potential disruption?The emergency-response guidelines outline notification procedures and organizational and individual responsibilities for immediate response.
  34. 34What type of strategy is to perform bulk transfer backups to a remote site on a periodic basis?Electronic vaulting
  35. 35How many rounds of encryption take place when DES is used?16
  36. 36What provision of the EU's safe harbour for privacy requires mechanisms to protect data against loss?The security provisions of the safe harbor require proper mechanisms to protect against data loss, misuse and unauthorized disclosure.
  37. 37hot site, warm site, cold site, MAA site Which one of the above alternate processing arrangements is rarely implemented?Mutual assistance agreements are rarely implemented because they are difficult to enforce in the event of a disaster require site activation.
  38. 38loss of data privacy or capacity fluctuation What is a common security risk when using grid computing solutions that consume available resources from computers over the Internet?Loss of data privacy as in many grid computing implementations, grid members can access the contents of the distributed work segments or divisions.
  39. 39In which phase of the business impact assessment is loss expectancies computed?Impact assessment phase
  40. 40What software component did the developers of Sun's Java programming language include to place privilege restrictions on Java code?Sandbox
  41. 41What is the primary goal of change management?The goal of change management is to ensure that any change does not lead to unintended outages or reduce security
  42. 42How soon after an incident should a portmortem review take place?Within one week
  43. 43Which backup format stores only those files that have been set with the archive bit and have been modified since the last complete backup?Differential backups.
    They store all files that have been modified since the time of the most recent full backup; they affect only those files that have the archive bit turned on.
  44. 44Which security mode does not require that all users have a security clearance for the highest level of information processes by the system?A multilevel security mode system
  45. 45Which business impact variable is used to estimate the amount of damage an organization incurs each time an event occurs?The Single Loss Expectancy (SLE)
  46. 46A host organization that houses onsite security staff has what form of security system?A proprietary system
  47. 47MitM, spoofing or hijack What type of attack occurs when malicious users position themselves between a client and server and then interrupt the session and take it over?A hijack attack
  48. 48What technology can be used to minimize the impact of a server failure immediately before the next backup was scheduled?Clustering servers adds a degree of fault tolerance, protecting against the impact of a single server failure
  49. 49What type of network discovery scan attempts to stimulate an already open network connection?The TCP ACK scan sends an ACK packet, simulating a packet from the middle of an already established connection
  50. 50Alarms, CCTV and monitoring devices are useful tools that fall under what form of access control?Technical physical access controls include access controls
  51. 51What protocol is slowly replacing certificate revocation lists as a real-time method of verifying the status of a digital certificate?Online Certificate Status Protocol (OCSP) provides real-time query / response services to digital certificate
  52. 52What database backup technology uses frequent transfers of information between the primary and alternate sites?Remote journaling technology transfers copies of the database transaction log to the alternate site on a frequent basis
  53. 53What is the major weakness inherent in public key cryptography systems?Slow speed.
    Public key cryptosystems are notoriously slower than their secret key counterparts in exchange for eliminating the difficulty of key exchange and better scalability and nonrepudiation
  54. 54What procedure returns business operations and processes to a working state?Disaster recovery
  55. 55one-way functions, prime numbers or hash function. RSA encryption relies on the use of two...prime numbers.
    The strength of RSA encryption relies on the difficulty of factoring the two large prime numbers used to generate the encryption key
  56. 56What makes full-interruption tests different from parallel tests, which often causes full-interruption to be met with the most resistance but produces the most realistic results?Full-interruption tests involve actually shutting down operations at the primary site and shifting them to the recovery site
  57. 57In addition to job rotation, what other security mechanism supports peer auditing?Mandatory vacation
  58. 58A biometric system that matches subjects to a database using a one-to-many searcv is providing...Identification
  59. 59Which type of virus uses a variety of keys to escape detection?Encrypted viruses use a variety of cryptographic keys with encryption and decryption routines to hide their code on their hard drive
  60. 60What remote access protocol replaced SLIP?PPP
  61. 61What type of virus always loads itself automatically when the system starts?A master boot record (MBR) virus infects the system's boot sector and loads when the system is started
  62. 62What regulation formalizes the prudent man rule, requiring that senior executives of an organization take personal responsibility for ensuring due care?The Federal Information Sentencing Guidelines
  63. 63What simple safeguard can be used to protect against replay attacks in secure communication?Time stamping messages
    Replay attacks take advantage of authentication requests that do not include a time stamp by later replaying the message to open a new authenticated session
  64. 64The Twofish algorithm uses an encryption technique not found in other algorithms that XORs the plain text with a separate subkey before the first round of encryption. What is this called?Prewhitening
  65. 65What is the typical activation time for a warm site?Typically within 12 hours
  66. 66mitigation, assignment, acceptance, rejection. Purchasing insurance is a form of...assignment (or trasnference)
  67. 67The normal operations of a business are restored at the conclusion of which phase of incident response?the closure phase
  68. 68What is the formula used to compute the ALE?ALE = AV * EF * ARO
    Annual Loss Expectancy is the product of the asset value (AV) times the exposure factor (EF) times the annual rate of occurrence (ARO)
    This is also the longer form of the formula:
    ALE = SLE * ARO
  69. 69What phase of a business impact assessment calculates the SLE for a given risk?Impact assessment
    The single loss expectancy (SLE) is a measure of how much damage would occur each time a risk materializes
  70. 70STRIDE is often used in relation to assessing threats to applications and OS's. what does the acronym stand for?Spoofing,
    Tampering,
    Repudiation,
    Information disclosure,
    DoS,
    Elevation of privilege
  71. 71What is the primary purpose of an exit interview?To review the NDA and other liabilities and restrictions placed on the former employee

Information

Description
CISSP Study Guide Practice Questions. (These are just some questions I got wrong while practising.)
Created by
Dani B
Views
45
Rating

More on CISSP Exam Domains and Practice Questions

Feedback

What is it about?

What do you think of the new look?

How do you like it?