Cissp

Front 1

These systems continue to operate following failure of a computer or network component. The system must be capable of detecting and correcting or circumventing a fault.

Back 1

Fault-tolerant systems

Front 2

When a hardware or software failure is detected, program execution is terminated, and the system is protected from compromise.

Back 2

Fail-safe systems:

Front 3

When a hardware or software failure is detected, certain noncritical processing is terminated, and the computer or network continues to function in a degraded mode.

Back 3

Fail-soft (resilient) systems:

Front 4

When a hardware or software failure is detected, the system automatically transfers processing to a hot backup component, such as a clustered server.

Back 4

Failover systems:

Front 5

security modes of operation
Dedicated:

Back 5

All authorized users must have a clearance level equal to or higher than the highest level of information processed on the system and a valid need-to-know.

Front 6

security modes of operation
System High

Back 6

All authorized users must have a clearance level equal to or higher than the highest level of information processed on the system but a valid need-to-know isn’t necessarily required.

Front 7

security modes of operation
Multilevel:

Back 7

Information at different classification levels is stored or processed on a trusted computer system (a system that employs all necessary hardware and software assurance measures and meets the specified requirements for reliability and security). Authorized users must have an appropriate clearance level, and access restrictions are enforced by the system accordingly.

Front 8

security modes of operation
Limited access

Back 8

Authorized users aren’t required to have a security clearance, but the highest level of information on the system is Sensitive but Unclassified (SBU).

Front 9

The concept of protection rings

Back 9

The concept of protection rings implements multiple domains with increasing levels of trust near the center. The most privileged ring is identified as Ring 0 and normally includes the operating system’s security kernel. Additional system components are placed in the appropriate concentric ring based on the principle of least privilege.

Front 10

Describe Open and closed systems

Back 10

An open system is a vendor-independent system that complies with a published and accepted standard. This promotes interoperability between systems and components made by different vendors. Additionally, open systems can be independently reviewed and evaluated, which facilitates identification of bugs and vulnerabilities and rapid development of solutions and updates.

A closed system uses proprietary hardware and/or software that may not be compatible with other systems or components. Source code for software in a closed system is not normally available.

Front 11

A security kernel is the combination of hardware, firmware, and software elements in a Trusted Computing Base that implements the reference monitor concept. Three requirements of a security kernel are that it must

Back 11

Mediate all accesses

Be protected from modification

Be verified as correct

Front 12

security kernel is the combination of hardware, firmware, and software elements in a Trusted Computing Base (TCB) that implements what Concept

Back 12

the reference monitor concept.

Front 13

A **************** is a system component that enforces access controls on an object. Stated another way, a reference monitor is an abstract machine that mediates all access to an object by a subject.

Back 13

reference monitor

Front 14

the total combination of protection mechanisms within a computer system, including hardware, firmware, and software, which is responsible for enforcing a security policy.

Back 14

Trusted Computing Base (TCB)