Cissp Telecommunications And Network Security

Front 1

Which of the following layers of the ISO/OSI model do packet filtering firewalls operate at?
A. Application layer
B. Session layer
C. Network layer
D. Presentation layer

Back 1

C. Network layer

Front 2

In the OSI/ISO model, at what level is SET (SECURE ELECTRONIC TRANSACTION PROTOCOL) provided?
A. Application
B. Network
C. Presentation
D. Session

Back 2

A. Application

Front 3

What is not at a hot spot?

Back 3

Data and Staff

Front 4

What is at a warm spot?

Back 4

partially ready to go but needs backups..

Front 5

What is a cold spot?

Back 5

Building, power, cooling basic connections.

Front 6

A car radio is an example of
A. Simplex communication
B. Half Duplex communication
C. Full Duplex communication

Back 6

Simplex = car radio
Half Duplex = Walkie-talkie
Full duplex = talking

Front 7

What is Hard-coded credentials?
A. Occurs when a programmer does not perform variable bounds checking
B. Backdoor username/password left by Programmers
manipulation of a back-end SQL server via a front-end web server
C. 3rd party execution of web scripting languages such as Javascript within the security context of a trusted site
D. CSRF or XSRF is a 3rd party redirect of static content within the security context of a trusted site

Back 7

Backdoor username/password left by Programmers

Front 8

What is Buffer Overflow?
A. Occurs when a programmer does not perform variable bounds checking
B. 3rd party execution of web scripting languages such as Javascript within the security context of a trusted site
C. altering normal PHP URLs and variables
D. manipulation of a back-end SQL server via a front-end web server

Back 8

Occurs when a programmer does not perform variable bounds checking

Front 9

What is SQL Injection?
A. manipulation of a back-end SQL server via a front-end web server
B. Backdoor username/password left by Programmers
C. CSRF or XSRF is a 3rd party redirect of static content within the security context of a trusted site
D. altering normal PHP URLs and variables

Back 9

manipulation of a back-end SQL server via a front-end web server

Front 10

What is Directory Path Traversal?
A. 3rd party execution of web scripting languages such as Javascript within the security context of a trusted site
B. Backdoor username/password left by Programmers
C. Escaping from the root of a web server into the regular file system
C. CSRF or XSRF is a 3rd party redirect of static content within the security context of a trusted site

Back 10

Escaping from the root of a web server into the regular file system.. manipulating the web address

Front 11

What is PHP remote File Inclusion?
A. Occurs when a programmer does not perform variable bounds checking
B. manipulation of a back-end SQL server via a front-end web server altering normal PHP URLs and variables
C. altering normal PHP URLs and variables
D. CSRF or XSRF is a 3rd party redirect of static content within the security context of a trusted site

Back 11

altering normal PHP URLs and variables

Front 12

What is Cross Site Scripting (XXS)?
A. 3rd party execution of web scripting languages such as Javascript within the security context of a trusted site
B. Backdoor username/password left by Programmers
manipulation of a back-end SQL server via a front-end web server
C. Escaping from the root of a web server into the regular file system altering normal PHP URLs and variables
D. altering normal PHP URLs and variables

Back 12

3rd party execution of web scripting languages such as Javascript within the security context of a trusted site

Front 13

Cross-Site Request Forgery?
A. Occurs when a programmer does not perform variable bounds checking altering normal PHP URLs and variables
B. CSRF or XSRF is a 3rd party redirect of static content within the security context of a trusted site
C. Backdoor username/password left by Programmers
D. Escaping from the root of a web server into the regular file system.. manipulating the web address

Back 13

CSRF or XSRF is a 3rd party redirect of static content within the security context of a trusted site

Front 14

Static testing

Back 14

tests the code passively: the code is not running

Front 15

White box software testing

Back 15

gives the tester access to program source code, data, structures, variables, etc.

Front 16

Black box testing

Back 16

gives the tester no internal details: the software is treated as a black box that receives inputs

Front 17

Unit testing

Back 17

low level tests of software components such as functions, procedures, or objects

Front 18

Installation Testing

Back 18

Testing software as it is installed and first operated

Front 19

Integration testing

Back 19

testing multiple software components as they are combined into a working system.

Front 20

Fuzzing

Back 20

a type of black box testing that enters random, malformed data as inputs into software programs to determine if they will crash.

Front 21

What is the software Capability Maturity Model

Back 21

is a maturity framework for evaluating and improving the software development process.

Front 22

Relational Databases are

Back 22

the most common modern database Which contain two dimensional tables of related data.

Front 23

what is a tuple

Back 23

a row in a database

Front 24

what is a attribute

Back 24

a column in a database

Front 25

what is a foreign key?

Back 25

A key in a related database table that matches the primary key.

Front 26

what is a data dictionary

Back 26

contains a description of the database tables. This is metadata or data about data

Front 27

Artificial Intelligence is

Back 27

the science of programming electronic computers to "think" or mimic the human brain

Front 28

what is often used to identify spam

Back 28

Bayesian filtering.. it is based on a number of probabilities and statics.

Front 29

Polyinstantiation

Back 29

allows two objects to have same name

Front 30

Polymorphism

Back 30

allows object to overload an operator with many forms respectively

Front 31

Data Definition Language

Back 31

use to create, modify, and delete databases

Front 32

What is Interface Definition Language (IDL)

Back 32

used by CORBA objects to communicate

Front 33

Types of database options

Back 33

relational (two dimensional tables)
hierarchical (form a tree)
object-oriented (combines data with function)

Front 34

Knowledge base

Back 34

Expert system component that consists of if/then statements

Front 35

inference engine

Back 35

follows a tree formed by the knowledge base and fires a rule when there is a match