Cyber Security Cissp

Front 1

Name the three Threat Modelling Techniques?

Back 1

Attackers, Software and Assets

Front 2

Name the US government agency who is responsible for administering the terms of privacy shield agreements between the EU and US under the EU GDPR

Back 2

Department of Commerce

Front 3

GLBA Gramm-Leach-Bailey Act contains

Back 3

Provisions regulating to privacy of customers financial information. It applies specifically to Financial institutions

Front 4

NIST SP800-53 Security Controls

Back 4

Baseline

Front 5

CDN (Content Distributed Network)

Back 5

Designed to provide reliable, low-latency, geographically distributed content

Front 6

Forensic Disk Controller

Back 6

Performs four functions, write blocking, returning data requested by a read operation, access-significant information from the device, reporting errors from the device back to the forensic host

Front 7

Which Kerberos service generates a new ticket and session keys

Back 7

TGS (Ticket-Granting Service) usually on the same server as the KDC

Front 8

Asynchronous rely on

Back 8

Built-in stop and start flag or bit which makes asynchronous communication less efficient than synchronous

Front 9

Why type of motion detector uses microwave frequency signal

Back 9

Wave Pattern motion detectors transmit ultrasonic or microwave signals into the monitor area

Front 10

Stateful Packet inspection firewall

Back 10

Know as dynamic packet filtering firewalls, track the state of a conversation and can allow a response from a remote system

Front 11

Static packet filtering and circuit level gateways only

Back 11

Filter based on source, destination and ports

Front 12

Application-level gateways firewalls

Back 12

Proxy traffic for specific applications

Front 13

Clipping is

Back 13

An analysis technique that only reports alerts after they exceed a set threshold

Front 14

Sampling is

Back 14

Is a more general term that describes any attempt to excerpt records for review

Front 15

Inference attack

Back 15

The attacker uses several pieces of general nonsensitive information to determine a specific value

Front 16

Isolation requires

Back 16

That transactions operate separately from each other

Front 17

Atomicity ensures

Back 17

That if any part of a database transaction fails, the entire transaction must be rolled back as if it never occurred.

Front 18

Durability requires

Back 18

That once a transaction is committed to the database it must be preserved

Front 19

Worms have

Back 19

Built-in propagation mechanisms that do not require user interaction

Front 20

Viruses and Trojan horses typically require

Back 20

User interaction to spread

Front 21

Logic bombs do not

Back 21

Spread from system to system but lie in wait until certain conditions are met

Front 22

How many possible keys uses 6-bit encryption keys

Back 22

2x2x2x2x2x2=64

Front 23

The US trusted foundry program helps to

Back 23

Protect the supply chain for components and devices by ensuring that the companies that produce and supply them are secure

Front 24

TEMPEST is

Back 24

The name for a program aimed at capturing data from electronic emissions

Front 25

MITRE conducts

Back 25

Research and development for the US government

Front 26

Knowledge-based authentication relies

Back 26

On answers to preselected information

Front 27

Dynamic knowledge-based authentication

Back 27

Builds questions using facts or data about the user.

Front 28

Risk-based identity proofing

Back 28

Uses risk-based metrics to determine whether identities should be permitted or denied access

Front 29

A honeypot is a

Back 29

Decoy computer system used to bait intruders into attacking

Front 30

A honeynet is a

Back 30

Network of multiple honeypots that creates a more sophisticated environment for intruders to explore

Front 31

A pseudoflaw is a

Back 31

False vulnerability in a system that may attract an hacker

Front 32

A darknet is a

Back 32

Segment of unused network address space that should have no network activity, therefore, maybe easily used to monitor for illicit activity

Front 33

C, C++ and Java are all

Back 33

Compiled languages - a compiler produces an executable girl that is not human readable

Front 34

JavaScript is an

Back 34

Interpreted language so code in not compiled prior to execution and is readable by humans

Front 35

Shadowed passwords contain

Back 35

Only character x in /etc/passwd

Front 36

SYN floods rely on

Back 36

TCP implementation on machines and network devices to cause denial of service

Front 37

Due care principe states

Back 37

That an individual should react in a situation using the same level of care that would be expected from any reasonable person

Front 38

Due diligence principle is

Back 38

A specific component of due care that states an individual assigned a responsibility should exercise due care to complete it accurately and in a timely manner

Front 39

Synthetic monitoring is

Back 39

proactive monitoring and uses recoded or generated traffic to test systems and software

Front 40

Proximity card uses

Back 40

Electromagnetic coil inside the card

Front 41

Parallel test the

Back 41

Team actually activates the disaster recovery site for testing but the primary remains operational

Front 42

Parallel test the

Back 42

Team actually activates the disaster recovery site for testing but the primary remains operational

Front 43

Full interruption test the

Back 43

Team takes down the primary site and confirms that the disaster recovery site is capable of handling regular operation

Front 44

The checklist review is the

Back 44

Least disruptive type of disaster recovery test. During a checklist review, team members each review the contents of their recovery checklist on their own and suggest any necessary changes.

Front 45

The checklist review is the

Back 45

Least disruptive type of disaster recovery test. During a checklist review, team members each review the contents of their recovery checklist on their own and suggest any necessary changes.

Front 46

Tabletop exercise

Back 46

Team members come together and walk through a scenario without making any changes to information systems

Front 47

MTD ( Maximum tolerable downtime) is

Back 47

The amount of time that a business maybe without a service before irreparable harm occurs. This measure is sometimes also called maximum tolerable outage (MTO)

Front 48

TOC/TOU (time of check/time of use) attack’s

Back 48

that change a symlink between the time that rights are checked and the file is accessed

Front 49

Smart cards are

Back 49

Type 2 Authenticator and include both a microprocessor and at least one certificate

Front 50

Masquerading or impersonation attack’s use

Back 50

Stolen or falsified credentials to bypass authentication mechanisms

Front 51

OpenID connect is an

Back 51

Authentication layer that works with OAuth 2.0 as its authorisation framework

Front 52

Separation of duties

Back 52

Not allowing the same person to hold two roles that when combined are sensitive

Front 53

Parol evidence rule states

Back 53

When an agreement between two parties is put into written form, it is assumed to be the entire agreement unless amended in writing.

Front 54

Best evidence rule says

Back 54

That a copy of a document is not admissible if the original document is available

Front 55

RTO ( Recovery time objective) is

Back 55

The amount of time expected to return an IT service or component to operation after failure

Front 56

RTO ( Recovery time objective) is

Back 56

The amount of time expected to return an IT service or component to operation after failure

Front 57

RPO (Recovery point objective) identifies

Back 57

The maximum amount of data, measured in time that maybe lost during recovery effort

Front 58

RTO ( Recovery time objective) is

Back 58

The amount of time expected to return an IT service or component to operation after failure

Front 59

RPO (Recovery point objective) identifies

Back 59

The maximum amount of data, measured in time that maybe lost during recovery effort

Front 60

SLA ( Service level agreement) are

Back 60

Written contracts that document service expectations

Front 61

Class b extinguishers use

Back 61

Carbon dioxide or soda acid as their fire suppression material and are useful against liquid based fires.

Front 62

The seven principles that the EU US privacy shield are

Back 62

choice, accountability, security, data integrity, access, recourse, enforcement and liability

Front 63

DMCA ( Digital Millennium Copyright Act) provides

Back 63

Safe harbour protection for the operators of internet service providers who only handle information as a common carrier for transitory purposes

Front 64

NIST SP 800-18 what action should be taken when significant change occurs in the system

Back 64

According to NIST SP 800-18 a system owner should update the system security

Front 65

Before granting any user access to information you should

Back 65

Verify that the user has an appropriate security clearance as well as a business need to know the information

Front 66

De-encapsulation is the

Back 66

Process of removing a header and possibly a footer from data received

Front 67

De-encapsulation is the

Back 67

Process of removing a header and possibly a footer from data received

Front 68

Encapsulation occurs

Back 68

When the header and or footer are added

Front 69

Metasploit

Back 69

Tool used to exploit known vulnerabilities

Front 70

Nikto is a

Back 70

Web application and server vulnerability scanning tool

Front 71

Ettercap is a

Back 71

Man in the middle attack tool

Front 72

THC Hydra is a

Back 72

Password brute force tool

Front 73

SPML ( Service provisioning Markup language) uses

Back 73

Requesting authorities to issue requests to provisioning service point.

Front 74

SPML ( Service provisioning Markup language) uses

Back 74

Requesting authorities to issue requests to provisioning service point.

Front 75

SAMPL is an

Back 75

Algebraic modelling language

Front 76

SPML ( Service provisioning Markup language) uses

Back 76

Requesting authorities to issue requests to provisioning service point.

Front 77

SAMPL is an

Back 77

Algebraic modelling language

Front 78

XACML is an

Back 78

Access control markup language used to describe and process access control polices in an XML format

Front 79

MAC ( Mandatory access control) systems can be

Back 79

Hierarchical, compartmentalised, hybrid

Front 80

Smurf attack’s use

Back 80

A distributed attack approach to send ICMP echo replies at a targeted system from many different source addresses

Front 81

Static packet filtering firewalls are known as

Back 81

First generation firewalls and do not track connection states.

Front 82

TKIP is only used

Back 82

As a means to encrypt transmission and is not used for data at rest

Front 83

RSA, AES and 3DES are all used on data

Back 83

At rest as well as data in transit

Front 84

Generational fuzzing is

Back 84

Known as intelligent fuzzing because it relies on the development of data models using an understanding of how the data is used by the program

Front 85

Latency is a

Back 85

Delay in the delivery of packets

Front 86

Jitter is a

Back 86

Variation in the latency for different packets

Front 87

Jitter is a

Back 87

Variation in the latency for different packets

Front 88

Interference is

Back 88

Electrical noise or other disruption that corrupts the contents of packets

Front 89

SCAP (Security Content Automation Protocol) is a

Back 89

Suite of specifications used to handle vulnerability and security configuration information. The national vulnerability database provided by NIST uses SCAP

Front 90

The three components of DevOps are

Back 90

Software development, operations and quality assurance

Front 91

Common types of structural coverage include

Back 91

Statement, branch or decision coverage, loop coverage, path coverage and data flow coverage

Front 92

RAM is

Back 92

Volatile RAM meaning that they are only available while power is applied to the memory chips

Front 93

EPROM, EEPROM and flash memory are all

Back 93

Nonvolatile meaning that they retain their contents even when powered off

Front 94

Limit Checks are

Back 94

Special form of input validation that ensure the value remains within an expected range

Front 95

SNMP is a

Back 95

UDP based service, UDP has no way of sending back errors so the system will switch protocols and use ICMP to send back information, of errors occur it will be a ICMP type 3 error

Front 96

Trike is a

Back 96

Threat modelling methodology that focuses on risk based approach

Front 97

VAST is a

Back 97

Threat modelling concept based on agile project management

Front 98

Polymorphic viruses actually

Back 98

Modify their own code as they travel from system to system. The virus’s propagation and destruction techniques remain the same but the signature of the virus is somewhat different each time it infects a new system..

Front 99

Agile Manifesto says

Back 99

You should build projects around motivated individuals

Front 100

Request control process

Back 100

Provides an organised framework within which users can request modifications, managers can conduct cost/benefit analysis and developers can prioritise tasks

Front 101

Remote mirroring

Back 101

Maintains mirrored images of servers at both the primary and alternate sites

Front 102

A user entitlement audit can

Back 102

Identify whether users have excessive privileges

Front 103

A user entitlement audit can

Back 103

Identify whether users have excessive privileges

Front 104

Knowledge based or signature based IDS is

Back 104

Effective only against know attack methods

Front 105

A user entitlement audit can

Back 105

Identify whether users have excessive privileges

Front 106

Knowledge based or signature based IDS is

Back 106

Effective only against know attack methods

Front 107

A behaviour based IDS

Back 107

Starts by creating a baseline of activity to identify normal behaviour and then measures system performance against the baseline to detect abnormal behaviour, allowing it to detect previously unknown attack methods

Front 108

TCP ACK scan sends

Back 108

An ACK packet simulating a packet from the middle of an already established connection

Front 109

NAC (Network Access Control) operates in a

Back 109

Pre-admission philosophy meaning it must meet all current security requirements before it is allowed to communicate with the network

Front 110

Screen scraping is a technology that can allow

Back 110

An automated tool to interact with a human interface

Front 111

User mode is the

Back 111

Basic mode used by the CPU when executing user applications.

Front 112

Three common means of ranking or rating threats are

Back 112

DREAD, Probability * Damage Potential and high/Med/Low

Front 113

Defense in depth is also know as

Back 113

Layering

Front 114

What phase of business impact assessment calculates the SLE

Back 114

Impact assessment

Front 115

FISMA (Federal Information Security Management Act)

Back 115

Passed in 2002 requires that federal agencies implement an information security program that covers the agency’s operation

Front 116

Owners have ultimate responsibility for

Back 116

The data and ensuring that it is classified properly

Front 117

Owners have ultimate responsibility for

Back 117

The data and ensuring that it is classified properly

Front 118

Administrators

Back 118

Assign permissions based on the principle of least privilege and need to know..

Front 119

Custodian

Back 119

Perform day to day security task ( backups etc) protects integrity and security of data

Front 120

Deterrent access control is

Back 120

Deployed to discourage violations of security policies

Front 121

Diffie Hellman algorithm allows

Back 121

The exchange of symmetric encryption keys between two parties over an insecure channel

Front 122

Simulation test

Back 122

Are similar to the structured walk-throughs. In simulation tests, disaster recovery team members are presented with a scenario and asked to develop an appropriate response

Front 123

Input validation protects against

Back 123

XSS Cross site scripting

Front 124

Trust

Back 124

Comes first, trust is built into a system by crafting the components of security

Front 125

Differential backups store

Back 125

All files that have been modified since the time of the most recent full backup..

Front 126

BCP is the

Back 126

Preventive practice of establishing and planning for threats to business flow including natural and unnatural risk and threats to daily operations

Front 127

DBMS supports

Back 127

One to many relationships often expressed in a tree structure (Hierarchical)

Front 128

Spiral model allows

Back 128

Developers to repeat iterations of another life cycle model such as the waterfall model

Front 129

An intrusion detection system IDS

Back 129

Is a product that automates the inspection of audit logs and real time event information to detect intrusion attempts

Front 130

The operation security triple is

Back 130

The relationship between assets, vulnerabilities and threats

Front 131

Trade mark R symbol is reserved

Back 131

For trademarks that have received official registration status by the US patent and trade mark office

Front 132

NIST (National Institute of Standard and Technology) is

Back 132

Responsible for developing standards and guidelines for federal computer systems

Front 133

How many times may an owner of a trademark renew the trade make

Back 133

Unlimited on the number of 10 year renewals

Front 134

Name a natural disaster with no warming

Back 134

Earthquake

Front 135

To be admissible evidence must be

Back 135

Relevant, material and competent

Front 136

Indicative

Back 136

Serving as a sign or indication of something

Front 137

Industrial espionage is

Back 137

Usually considered a business attack

Front 138

In an agile software development process how often should business users be involved ?

Back 138

Agile development process requires that business users interact with developers on a daily basis

Front 139

The cardinality of a table refers to

Back 139

The number of rows in the table

Front 140

Degree of a table is the

Back 140

Number of columns

Front 141

Which type of alarm system broadcasts a range of 400 feet

Back 141

Local alarm systems, are locally controlled broadcasts systems that emit audible signals (A fire alarm is an example of a local alarm system)

Front 142

Which type of alarm system signals a monitoring station

Back 142

Centralised alarm systems remotely monitor sensors spread around a business facility or campus and trigger on some specified event

Front 143

Database views

Back 143

Use SQL statements to limit the amount of information that a user can view from a table

Front 144

A momentary loss of power is a

Back 144

Fault

Front 145

Companion viruses

Back 145

Self contained exe files with file names similar to those of systems or programs

Front 146

Concentric circle security model represents

Back 146

The best practice known as defense in depth

Front 147

Technical physical security controls include

Back 147

Access controls, intrusion detection, alarms, closed circuit television, monitoring, heating, ventilating, and HVAC, power supplies, fire detection and suppression

Front 148

An electronic access control lock comprises three elements

Back 148

An electromagnet to keep the door closed, a credential reader to authenticate the subject and to disable the electromagnet, and a door closed sensor to reenable the electromagnet

Front 149

Content-dependent control

Back 149

Is focused on the internal data of each field

Front 150

Low Orbit Lon Cannon (LOIC)

Back 150

A tool used to for DDOS

Front 151

Hijack attack

Back 151

An off shoot of a man in the middle attack a malicious user positioned between a client and server and then interrupts the session and takes it over..

Front 152

Man in the middle attack

Back 152

Doesn’t interrupt the session and take it over

Front 153

Formula used to compute the ALE

Back 153

ALE = AV * EF * ARO the shorter version is ALE = SLE * ARO

Front 154

First step of the business impact assessment process

Back 154

Identification of priorities

Front 155

Sampling or data extraction

Back 155

Is the process of extracting specific elements from large collections of data or larger body of data to construct a meaningful representation or summary of the whole. In other words, sampling is a form of data reduction.

Front 156

ALE expectancy of 1% of 125000000

Back 156

125000000 * 1% =

Front 157

Impact assessment

Back 157

Loss expectancies are a measure of impact and are calculated.

Front 158

USGS (US Geological Survey) provides

Back 158

Detailed earthquake risk data

Front 159

Manual review systems

Back 159

Observer or auditor of manual review systems is directly responsible for recognising the failure of a system

Front 160

Manual review systems

Back 160

Observer or auditor of manual review systems is directly responsible for recognising the failure of a system

Front 161

What is the goal of BCP

Back 161

To ensure RTO are shorter than MTDs

Front 162

Heuristic detection techniques

Back 162

Develop models of normal activity and then identify deviations from baseline

Front 163

Omissions and errors

Back 163

Are difficult aspects to protect against, particularly as they deal with human or circumstantial origins

Front 164

Traffic analysis and Trend analysis

Back 164

Are forms of monitoring that examine the flow of packets rather than the actual contents

Front 165

Auxiliary alarm systems

Back 165

Facilitate local, remote and centralised alarm systems by notifying external sources, (police, fire medical)

Front 166

Evidence collection

Back 166

Takes place during the response phase of the incident

Front 167

Electronic vaulting

Back 167

Uses bulk transfer to copy database contents to a remote site on a periodic basis

Front 168

Parallel test

Back 168

Involves relocating personnel to alternate site and implementing site activation procedures

Front 169

Multistate processing systems

Back 169

Can handle multiple security levels simultaneously

Front 170

Trademarks are used to protect

Back 170

Words, slogans that represent a company and its products or services

Front 171

Are all compliance obligations dictated by state, federal or international law

Back 171

No, some are such as PCI DSS

Front 172

Code of Federal Regulations (CFR) is an

Back 172

Example of administrative law

Front 173

What federation formalises the Prudent man rule

Back 173

Federal Sentencing Guidelines

Front 174

Trademarks are

Back 174

Issued every 10 years and be renewed for unlimited successive..

Front 175

Fourth Amendment protects individuals

Back 175

against wiretapping and other invasions of privacy

Front 176

Substitution Cipher

Back 176

Changes the value of individual characters in a message

Front 177

The principle of Security

Back 177

Requires proper mechanisms to protect data against loss, misuse and authorised disclosure

Front 178

FERPA (Family Educational Rights and Privacy Act) protects

Back 178

The rights of students

Front 179

User Mode

Back 179

Used by the CPU when executing user instructions. Used to protect users from accidentally damaging the system through poorly designed code

Front 180

10 system is

Back 180

A code used in radio communications for brevity and clarity

Front 181

MD5 algorithms produces

Back 181

128-bit hashes regardless of size

Front 182

Duration of trade secret protection under federal law

Back 182

No limit (unlimited)

Front 183

Clark Wilson model is used for

Back 183

Commercial applications it focus is on data integrity

Front 184

Bell-LaPadula is used most often for

Back 184

Military applications

Front 185

Bell-LaPadula is used most often for

Back 185

Military applications

Front 186

Nash Model applies to

Back 186

Datasets usually within database management systems

Front 187

What is the purpose of a military and intelligence attack

Back 187

To acquire classified information

Front 188

Candidate key

Back 188

Can be used to uniquely identify any record in a table

Front 189

Failing to perform periodic security audits can result in

Back 189

The perception that due care is not being maintained..

Front 190

User entitlement audit can

Back 190

Detect when employees have excessive privileges

Front 191

User entitlement audit can

Back 191

Detect when employees have excessive privileges

Front 192

Asset valuation

Back 192

Identifies that value of an asset

Front 193

Threat modelling identifies

Back 193

Threats to valuable assets

Front 194

Primary benefit of a patch management system

Back 194

Prevents outages from known attacks