Questions: CISSP CBK Final Exam
103. Reference monitor _______. |
104. Which security mode best defines where users have both the required clearance and the need-to-know for all data on a system? |
105. Otherwise known as a “trap door”, this vulnerability is often built into a system. |
106. What criteria went into the Common Criteria standard? |
107. Which of the following is the European evaluation criteria standard? |
109. A cipher that scrambles letters into different positions is referred to as what? |
110. The HAVAL algorithms perform what function? |
111. Which security model focuses on confidentiality only? |
112. Which of the following includes the definition of procedures for emergency response? |
113. Which of the following team should be part of the disaster recovery procedures? |
114. A characteristic of security model that enforces information flow in only one direction is: |
115. The business continuity planning (BCP) project management and initiation phase does not involve? |
116. In what way does the RSA algorithm differs from the Data Encryption Standard (DES)? |
117. Information flow models: |
118. Which type of network is more likely to include Frame Relay, Switched Multi-megabit Data Services (SMDS), and X.25? |
119. Which device can Forward, Filter, and Flood? |
120. Which of the following is not a good description of Pretty Good Privacy (PGP)? |
122. Which is not a type of service available with ATM? |
123. MAC (Media Access Control) and LLC (Logical Link Control) have been designated to which layer by the IEEE? |
124. ____ is when a layer 3 packet is modified to fit into a layer 2 network with different characteristics. |
125. What is the role of asymmetric key cryptography in public key infrastructure (PKI) applications? |
126. Which routing protocol is used to allow hosts to participate in multicasting? |
127. ARP and RARP are used to map which? |
128. Use the unique response from a given system to identify the operating system running on a host is also known as _____. |
129. Which is the best defense against network sniffing? |
130. A Smurf attack takes advantage of which of the following? |
131. Which is not true about fair cryptosystems? |
132. A system where a user authenticates, is disconnected, and the receiving system connects back to a number in a pre-defined database is also known as which? |
133. What does Advanced Encryption Standard (AES) do? |
134. A Sockets (SOCKS) gateways can be classified as which type of firewall? |
135. RFC 1918 extended IPv4 with the introduction of non-routable addresses in support of which technology below? |
136. In configuration management, a configuration item is? |
137. In software development life cycle, the Waterfall Model assumes that…? |
138. What does the Spiral SDLC Model depicts? |
139. What can best be described as an abstract machine which it must mediate all access of subjects to objects? |
140. Which provides a physical connection between the network cabling and the computer’s internal bus? |
141. What is defined as the hardware, firmware and software elements of a trusted computing base that implement the reference monitor concept? |
142. Critical areas should be lighted: |
143. The percentage of loss a realized threat could have on a certain asset is known as the: |
144. Why does buffer overflow happen? |
145. Referential integrity requires that for any foreign key attribute, the referenced relation must have a tuple with the same value for which of the following? |
146. What type of malware is self-contained and it does not need to be part of another computer program to propagate? |
147. Which of the following represents a prolonged high voltage? |
148. What type of malware that is capable of infect a file with an encrypted copy of itself, then modify itself when decoded to make almost impossible to detect by signature-based virus scanner? |
149. A timely review of system access records would be an example of which basic security function? |
151. A major disadvantage of single sign-on (SSO) is: |
152. Which of the following can be identified when exceptions occur using operations security detective controls? |
153. An access system that grants users only those rights necessary for them to perform their work is operating on follows which security principle? |
 | 1 | 2 | 3 | 4 | 5 |  |
Русский