Questions: CISSP CBK Final Exam


154. Three principal schemes that provide a framework for managing access control are

155. When a communication link is subject to monitoring, what is the advantage for using an end-to-end encryption solution over link encryption solution?

156. To which form of access control is a rule based control mechanism usually related?

157. Which of the following does a digital signature provide?

158. What role does biometrics have in logical access control?

159. When establishing a violation tracking and analysis process, which one of the following parameters is used to keep the quantity of data to manageable levels?

160. The accounting branch of a large organization requires an application to process expense vouchers. Each voucher must be input by one of many accounting clerks, verified by the clerk’s applicable supervisor, then reconciled by an auditor before the reimbursement check is produced. What access control technique should be built into the application to meet the information protection needs?

161. What best describes two-factor authentication?

162. A timely review of system access records would be an example of which basic security function?

164. Risk management helps you do all of the followings except:

165. Which of the following identifies the encryption algorithm selected by NIST for the new Advanced Encryption Standard (AES)?

166. What is the role of internet key exchange (IKE) within the IPsec protocol?

167. Which type of attack is based on the probability of two different messages using the same hash function producing a common message digest?

168. Which of the following encryption methods is considered unbreakable?

169. The Clipper Chip utilizes which concept in public key cryptography?

170. Public Key algorithms are:

171. Cryptography does not concern itself with:

172. Which of the following protects Kerberos against replay attacks?

173. Which network topology offers the highest reliability and availability?

174. A public key algorithm that does both encryption and digital signature is which of the following?

175. Which of the following is the correct calculation?

176. Copies of the original discs and other media are considered as what type of evidence?

177. Which of the following statement is most accurate of digital signature?

178. The Diffie-Hellman algorithm is primarily used to provide which of the following?

179. Of the following, which is most true?

181. Of the followings, which is the best description of a digital signature?

182. What encryption operation is used when AES uses S-boxes during the process of encryption?

183. Which item is the responsibility of key management?

184. How many bits make up the effective Data Encryption Standard (DES) key?

185. The estimated frequency a threat will occur within a year is known as the:

186. What is the Clipper Chip key size?

187. When an organization is determining which data is sensitive, it must consider all of the following except:

188. Data Encryption Standard (DES) uses which algorithm?

189. To speed up RAID disk access, an organization can:

190. Which choice below most accurately describes the organization’s responsibilities during an unfriendly termination?

191. The concept of least privilege…?

192. Which is most likely to help a company detect fraudulent activity:

193. Clipping level is all of the followings except:

194. Proper change control management involves:

195. All of the followings are acceptable for sanitizing data except:

196. Trusted recovery may be defined as:

197. Which of the following is incorrect with respect to a system cold start:

198. Which of the following statements is incorrect:

199. ____ tunnels NetBEUI and IPX protocols.

200. Which of the following statements regarding session hijacking is incorrect:

201. Separation of duty can be defeated by:

202. Recovery controls attempt to:

203. Which of the following questions is less likely to help in assessing physical and environmental protection?

204. Security guards are appropriate whenever the function required by the security program involves which of the following?

205. ______ communications rely on clocking systems at the sending and receiving ends to sync, rather than stop and start bits.

1  2  3  4  5