Cissp-Study Notes

Front 1

What’s a Clipper chip?

Back 1

A device used by government agencies to bypass encryption.

Front 2

Which attack would be viable to obtain 2 different messages that produce same message using same hash function?

Back 2

Birthday attack

Front 3

Leakage sources used by side-channel analysis

Back 3

Power, timing, electromagnetic

Front 4

Which attack usually analyzed large amounts of plaintext pairs created with the same key?

Back 4

Linear cryptanalysis

Front 5

Which attack is less likely to be caught when trying to use the credentials of another user or admin?

Back 5

Pass the hash

Front 6

Which of the encryption standards rely on “web of trust”?

Back 6

PGP

Front 7

Zeroization

Back 7

Erasing of electronic data by overwriting the contents with no value so that the data can not be recovered.

Front 8

The network admin see all nodes on a subnet are experiencing network slowness and also suspects an infected computer on the network. Which tool can be utilized in this situation?

Back 8

Protocol analyzer

Front 9

A 802.1 device performs the following

Back 9

Role based access checking, all assignment, posture checking

Front 10

Risk with using UDP

Back 10

Packets may arrive out of order

Front 11

Packet destined for a devices on a network?

Back 11

Broadcast

Front 12

A land attack exemplifies what kind of attack?

Back 12

DoS

Front 13

2 common types of coax transmission methods

Back 13

Broadband and baseband

Front 14

Will capture all data whether or not it’s intended for your machine

Back 14

Promiscuous mode

Front 15

Host exposed to an attack from the internet

Back 15

Bastion host

Front 16

What type of firewall delivers highest amount and depth of control?

Back 16

Application gateway

Front 17

Crossover rate expressed as

Back 17

FRR=FAR

Front 18

Which method of data erasure is used when only special laboratory techniques can recover data?

Back 18

Clearing

Front 19

For system hacking, which is the next step after cracking systems account password?

Back 19

Maintain access

Front 20

Which information when compromised, could cause serious damage to national security?

Back 20

Secret

Front 21

A security manager wants all laptops to include a security crypto processor. The hardware required for this would be?

Back 21

Trusted platform module (tpm)

Front 22

A data custodian is a person who is responsible for securing resources after security label is assigned to a resource by?

Back 22

Data owner

Front 23

The order in which the physical protection system should work

Back 23

Deter-Detect-Delay-Response

Front 24

Physical factors for physical security environment protection factors

Back 24

Facility construction and location

Security features of facility

Earth movement

Front 25

The viewing of events after the fact using a CCTV is considered a

Back 25

Detective control

Front 26

A structured classification scheme for computer security attack and incident information

Back 26

Taxonomy

Front 27

What is the bare minimum twisted pair cat cable for 100MBps?

Back 27

Cat 5

Front 28

The access control which allows the ability to take action on a subject

Back 28

Right

Front 29

Access control matrix that is called the ACL

Back 29

Column

Front 30

Establishes DAC over a file in a directory

Back 30

Subject

Front 31

Advantage of discretionary access control technique

Back 31

Automatic limited access

Front 32

Preventing an unauthorized user from accessing a file is a function of

Back 32

Authorization

Front 33

Administrators dictate who can access and modify data and systems

Back 33

Mandatory

Front 34

Access rights assigned to individual subjects

Back 34

Capabilities

Front 35

Access rights assigned to objects

Back 35

Access control lists

Front 36

All access must be mediated, protected from unauthorized modification and verifiable as correct is implemented through what?

Back 36

A security kernel

Front 37

RBAC can implement either

Back 37

Discretionary access control or mandatory access control

Front 38

What type of control is a permission?

Back 38

Logical

Front 39

Passwords

Back 39

Something you know