Вопросы: CISSP CBK Final Exam

103. Reference monitor _______.

104. Which security mode best defines where users have both the required clearance and the need-to-know for all data on a system?

105. Otherwise known as a “trap door”, this vulnerability is often built into a system.

106. What criteria went into the Common Criteria standard?

107. Which of the following is the European evaluation criteria standard?

108. In the following top-down Common Criteria evaluation process, what is the missing component: Protection Profile ? Target of Evaluation ? ? Security Functionality/Assurance Requirements ? Evaluation ? Evaluation Assurance Level

109. A cipher that scrambles letters into different positions is referred to as what?

110. The HAVAL algorithms perform what function?

111. Which security model focuses on confidentiality only?

112. Which of the following includes the definition of procedures for emergency response?

113. Which of the following team should be part of the disaster recovery procedures?

114. A characteristic of security model that enforces information flow in only one direction is:

115. The business continuity planning (BCP) project management and initiation phase does not involve?

116. In what way does the RSA algorithm differs from the Data Encryption Standard (DES)?

117. Information flow models:

118. Which type of network is more likely to include Frame Relay, Switched Multi-megabit Data Services (SMDS), and X.25?

119. Which device can Forward, Filter, and Flood?

120. Which of the following is not a good description of Pretty Good Privacy (PGP)?

122. Which is not a type of service available with ATM?

123. MAC (Media Access Control) and LLC (Logical Link Control) have been designated to which layer by the IEEE?

124. ____ is when a layer 3 packet is modified to fit into a layer 2 network with different characteristics.

125. What is the role of asymmetric key cryptography in public key infrastructure (PKI) applications?

126. Which routing protocol is used to allow hosts to participate in multicasting?

127. ARP and RARP are used to map which?

128. Use the unique response from a given system to identify the operating system running on a host is also known as _____.

129. Which is the best defense against network sniffing?

130. A Smurf attack takes advantage of which of the following?

131. Which is not true about fair cryptosystems?

132. A system where a user authenticates, is disconnected, and the receiving system connects back to a number in a pre-defined database is also known as which?

133. What does Advanced Encryption Standard (AES) do?

134. A Sockets (SOCKS) gateways can be classified as which type of firewall?

135. RFC 1918 extended IPv4 with the introduction of non-routable addresses in support of which technology below?

136. In configuration management, a configuration item is?

137. In software development life cycle, the Waterfall Model assumes that…?

138. What does the Spiral SDLC Model depicts?

139. What can best be described as an abstract machine which it must mediate all access of subjects to objects?

140. Which provides a physical connection between the network cabling and the computer’s internal bus?

141. What is defined as the hardware, firmware and software elements of a trusted computing base that implement the reference monitor concept?

142. Critical areas should be lighted:

143. The percentage of loss a realized threat could have on a certain asset is known as the:

144. Why does buffer overflow happen?

145. Referential integrity requires that for any foreign key attribute, the referenced relation must have a tuple with the same value for which of the following?

146. What type of malware is self-contained and it does not need to be part of another computer program to propagate?

147. Which of the following represents a prolonged high voltage?

148. What type of malware that is capable of infect a file with an encrypted copy of itself, then modify itself when decoded to make almost impossible to detect by signature-based virus scanner?

149. A timely review of system access records would be an example of which basic security function?

150. Which of the following is a reasonable response from the intrusion detection system when it detects Internet Protocol (IP) packets where the IP source address is the same as the IP destination address?

151. A major disadvantage of single sign-on (SSO) is:

152. Which of the following can be identified when exceptions occur using operations security detective controls?

153. An access system that grants users only those rights necessary for them to perform their work is operating on follows which security principle?

<< 1 2 3 4 5 >>