Candi's Cissp Domain 8

Front 1

What kind of language is 1's and 0's?

Back 1

Machine language

Front 2

What kind of language are these? C++, Ruby, Java, Visual Basic

Back 2

Higher level languages

Front 3

What kind of language are C, C++, Java, Fortran?

Back 3

Compiled languages

Front 4

What kind of language are Javascript, VBScript?

Back 4

Interpreted language

Front 5

What are examples of Object Oriented programming?

Back 5

C++, Java, .Net

Front 6

What are the 7 steps in the Systems Development Lifecycle?

Back 6

1. Concept definition

2. Requirements

3. Control specifications (security)

4. Design review

5. Code review

6. UAT

7. Maintenance & Change Management

Front 7

What is the Spiral lifecycle model?

Back 7

Many waterfall prototypes created throughout allowing developers to return to the Planning phase.

Front 8

What are the 5 levels of SW-CMM (capability maturity model) that organizations go through?

Back 8

Level 1 - Initiating (disorganized)

Level 2 - Repeatable (code reuse begins)

Level 3 - Defined (formal dev processes)

Level 4 - Managed (can measure)

Level 5 - Optimizing (cont. improvement)

Front 9

What are the 5 phases of the IDEAL model (organization improvement)?

Back 9

1. Initiating

2. Diagnosing

3. Establishing

4. Acting

5. Learning

Front 10

True or False. Change management has more to do with approvals while Configuration management has more to do with recording the facts about the change.

Back 10

True

Front 11

What are the 3 controls in Change Management?

Back 11

Request - Change - Release

Front 12

What is used to control the versions of SW and formally track all changes (doesn't deal with SLA's)?

Back 12

Configuration Management

Front 13

What is bringing SW development, operations and quality assurance together?

Back 13

DevOps

Front 14

True or False. Developers must know when to require authentication and verify credentials for every API call and when it's not necessary.

Back 14

True

Front 15

In SW testing, what is testing the SW for values that return results within reasonable bounds?

Back 15

Reasonable check

Front 16

In SW testing, what is testing the internal structures of the program and steps through the code line by line?

Back 16

White box testing

Front 17

In SW testing, what is testing the program from the perspective of a user?

Back 17

Black box testing

Front 18

In SW testing, what is testing the program from the users perspective and uses the source code to design the tests?

Back 18

Gray box testing

Front 19

True or False. It's ok if developers put their API keys in a public code repository.

Back 19

False. Attackers have created bots looking for these keys.

Front 20

What DBMS (db management system) is set up with columns and rows, is flat and 2 dimensional?

Back 20

RDBMS (Relational DB Management System)

Front 21

For a RDBMS with 3 rows and 8 columns, what is the cardinality/degree?

Back 21

Cardinality of 3 and degree of 8

Front 22

What is the unique identifier of the records in a table called?

Back 22

Primary key

Front 23

What links 2 tables?

Back 23

Foreign key

Front 24

What is a combination of column headings to determine uniqueness?

Back 24

Candidate key

Front 25

In the ACID model, what are db transactions that are all or nothing; both sides of the transaction succeed or neither do?

Back 25

Atomicity

Front 26

In the ACID model, what is it where the db goes back to its consistent state after the transaction?

Back 26

Consistency

Front 27

In the ACID model, what is it when transactions complete before the next one occurs?

Back 27

Isolation

Front 28

In the ACID model, what is it that once the transaction is committed to the db,it is preserved?

Back 28

Durability

Front 29

What db edit control allows only one user at a time to make a db change?

Back 29

Concurrency

Front 30

What is adding another row in the db (with the same primary key) to throw off anyone looking at the db?

Back 30

Polyinstantiation

Front 31

What are artificial intelligence and expert (accumulated knowledge of experts in a system) systems called?

Back 31

Knowledge-based systems

Front 32

What analyzes the information in the knowledge base of an expert system to arrive at an appropriate decision?

Back 32

Inference engine

Front 33

Inference engines use this 'blurred boundaries' which is based on degrees of truth? (mimics human thought)

Back 33

Fuzzy logic

Front 34

What are the 4 steps of fuzzy logic?

Back 34

Fuzzification - Inference - Composition - Defuzzification

Front 35

What imitates the human mind to estimate functions that can depend on a large number of inputs that are generally unknown? Involves many layers of weighted summations. The system goes through a training period where the network works backwards from accurate decisions using the learning rule or Deltasone rule.

Back 35

Neural networks

Front 36

What provides an inference engine and knowledge base for network security?

Back 36

NIDES (Next Generation Intrusion Detection Expert System)

Front 37

What malicious code depends on careless humans?

Back 37

Viruses and Trojan Horses

Front 38

What malicious code operates under its own power?

Back 38

Worms

Front 39

What is a malicious individual who doesn't understand the technology, but downloads ready to use SW from the internet and launches attacks?

Back 39

Script kiddie

Front 40

What are the 2 main functions of viruses?

Back 40

Propagation and destruction

Front 41

What propagation technique virus attacks the bootable portion of media (hard disk, USB drive, CD) that the computer uses to load the OS?

Back 41

Master Boot Record virus (spreads through the sharing of media)

Front 42

What propagation technique virus attacks executable files (.exe,. com)?

Back 42

File Infector virus

Front 43

What propagation technique virus is a self contained executable that escapes detection by using a similar filename?

Back 43

Companion virus

Front 44

What propagation technique virus infects an app like MSFT Word and causes a sequence of actions to be performed automatically when the app is started?

Back 44

Macro virus (I Love You virus is a famous example)

Front 45

What propagation technique virus injects itself into a trusted runtime of the OS, such as winlogin.exe and explorer.exe?

Back 45

Service Injection virus

Front 46

True or False. Many antivirus SW identify viruses by comparing what is found while scanning a system to signatures (characteristics) in their large virus db.

Back 46

True

Front 47

What are the 3 actions antivirus SW can take when it finds a virus?

Back 47

Disinfect - Quarantine - Delete

Front 48

What virus uses more than one propagation technique?

Back 48

Multipartite virus

Front 49

What virus hides itself by tampering with the OS to fool the AV SW?

Back 49

Stealth virus

Front 50

What virus modifies its own code as it travels from system to system?

Back 50

Polymorphic virus

Front 51

What virus is encrypted to avoid detection?

Back 51

Encrypted virus

Front 52

What is malicious code that lies dormant until triggered? (viruses and Trojan Horses contain these)

Back 52

Logic bombs

Front 53

What is it when a user downloads SW they think is safe, but in fact carries malicious code? (e.g. user downloads some rogue AV SW that contains malicious code which they then pay the same AV vendor to have it removed)

Back 53

Trojan Horse

Front 54

What worm attacked unpatched MSFT internet servers and performed 3 attacks (1. infected IP addresses it found, 2. defaced HTML pages, saying 'Hacked by Chinese', 3. planted a logic bomb that would create a DoS on the Whitehouse's homepage)

Back 54

Code Red worm

Front 55

What was the first virus to cause physical damage to a facility? It was looking for specific systems in hopes of triggering nuclear weapons. Rumored to have been created by the US & Israel to disable Iran's nukes.

Back 55

Stuxnet

Front 56

What monitors your actions and transmits them to a remote system?

Back 56

Spyware

Front 57

What displays advertisements on infected systems?

Back 57

Adware

Front 58

What is the primary countermeasure to malicious code?

Back 58

Antivirus filtering SW

Front 59

Where should you install AV SW?

Back 59

Client systems, servers, content filters (majority of viruses are exchanged over email)

Front 60

What is the difference between removing and cleaning malicious code?

Back 60

One removes and the other removes and repairs

Front 61

What is the period of time called between malicious code being in the wild and when the vendor has patched for it?

Back 61

Zero day vulnerability

Front 62

What 2 things can you do to protect against zero day vulnerabilities?

Back 62

Do integrity checking with SW like Tripwire that looks for unexpected modifications and maintain ACLs to limit the spread

Front 63

What is the simplest technique attackers use to gain illegitimate access?

Back 63

Password attacks (guessing or attacking a dictionary that stores passwords)

Front 64

What helps users who forget complex passwords by allowing them to create unique, strong passwords for each service they use without having to memorize them?

Back 64

LastPass tool

Front 65

What is the cornerstone of any security program?

Back 65

Education

Front 66

What is the best way to prevent password attacks?

Back 66

Supplement them with other authentication techniques

Front 67

Once attackers get into a system, they can use rootkits to elevate their privileges. What is the best defense against rootkit vulnerabilities?

Back 67

Keep systems patched

Front 68

What enables attackers to inject client-side scripts into web pages that take users to another page that is authentic, but malicious code gets executed asking for personal information and too often is given up?

Back 68

Cross-Site Scripting (XSS)

Front 69

How do you prevent XSS?

Back 69

Require input validation on user input fields.

Front 70

What is even riskier than XSS where attackers insert nefarious statements into a field in a web data-driven app to gain unauthorized access to the underlying db and makes changes at the db level? (e.g. dump the contents of the db to the attacker)

Back 70

SQL Injection

Front 71

How do you counter SQL Injections?

Back 71

Require input validation

Limit privileges to the db used by the web server

Use stored procedures (they limit the apps ability to execute arbitrary code)

Front 72

What types of attacks target specific systems to gather information?

Back 72

Reconnaissance attacks

Front 73

What reconnaissance attack pings IP addresses on a network looking for systems that respond to the ping?

Back 73

IP Probes (aka IP Sweeps or Ping Sweeps)

Front 74

What reconnaissance attack is used to scan the IP addresses that respond to a ping and is now looking for services that run there?

Back 74

Port Scans

Front 75

What reconnaissance attack looks for vulnerabilities the system might have? Nessus and Open VAS are common tools for this.

Back 75

Vulnerability Scans

Front 76

What reconnaissance-type attack is looking through physical documents thrown out that may contain sensitive information?

Back 76

Dumpster Diving

Front 77

What type of attacks impersonate someone who has permissions an attacker desires?

Back 77

Masquerading Attacks

Front 78

What masquerading attack is it where an attacker reconfigures their system so it has the IP address of a trusted system to gain access to other resources?

Back 78

IP Spoofing

Front 79

How do you counter IP Spoofing attacks?

Back 79

Set internal IP addresses to not be able to enter the network from the outside.

Set external IP addresses to not be able to exit the network from the inside.

Set private IP addresses to not pass through the router in either direction unless specifically allowed.

Front 80

What is it when an attacker takes over an active session and assumes the identity of the authorized user?

Back 80

Session Hijacking

Front 81

These are common techniques for what type of attack? Capturing details of the authentication between the client and server; Tricking the client into thinking the attacker's system is the server; Accessing Web applications using the cookie data of a user who did not properly close the connection.

Back 81

Session Hijacking

Front 82

How do you combat Session Hijacking attacks?

Back 82

Use anti-replay authentication and make cookies expire within a reasonable period.

Front 83

In object-oriented programming do you want high or low Cohesion (combines related sw components into 1 unit) and high or low Coupling (dependency on other sw modules)?

Back 83

High Cohesion and low Coupling

Front 84

In object-oriented programming, what does one object invoke in another object that it wants to interact with?

Back 84

Method.

It invokes one of the objects methods

Front 85

When the password is strong, how would an attacker try and get it?

Back 85

Social engineering

Front 86

Which ensures UAT has occurred, Change Control or Release Control?

Back 86

Release Control

Front 87

What attack exploits the trust that sites have in a user's browser by forcing submission of authenticated requests to 3rd party sites?

Back 87

Cross-Site Request Forgery (XSRF or CSRF)

Front 88

If non-volatile storage like flash drives, DVDs and hard disks are secondary storage, what is meant by Primary Storage?

Back 88

Memory.

It is directly available to the CPU.

Front 89

What attack are the double dots in this series indicating? ../../../../

Back 89

Directory Traversal attack

Front 90

What is the level of confidence in SW, Assurance or Accreditation?

Back 90

Assurance

Front 91

What are the 2 types of covert channels for exfiltrating information?

Back 91

Timing and storage

Front 92

What is it called when an attacker can deduce a more sensitive piece of information by analyzing several pieces of less sensitive information?

Back 92

Inference

It is not Aggregation (act of obtaining information classified as a high level by combining low level information. Also is the unintended accumulation of privileges.

Front 93

What is most effective against session hijacking, expire cookies frequently or use TLS?

Back 93

Use TLS

Front 94

What is put in place of the hashed password in a password file when the hashed password is stored in a shadow password file?

Back 94

x

Front 95

What db is not relational or hierarchical and instead stores key-value?

Back 95

NoSQL db

Front 96

What is like a NoSQL db, but uses nodes and edges to store data rather than keys and values?

Back 96

Graph db

Front 97

In a RDBMS, what key uniquely identifies each row (primary, foreign or candidate key)?

Back 97

Primary

Front 98

What allows the storage of different pieces of information in a db at different classification levels to prevent attackers from inferring anything about the absence of information?

Back 98

Polyinstantiation

Front 99

What occurs when one transaction reads a value from a db that was written by another transaction that did not commit?

Back 99

Dirty read