Cissp Domain 3 - Security Engineering (Matt)

Front 1

What are the two main models mentioned in class, regarding Systems Lifecycle?

Back 1

1: Systems Engineering Process - Lifecycle

2: System Development Life Cycle (NISTs)

Front 2

What is the SDLC?

Back 2

System Development Life Cycle - overall process of developing, implementing, and retiring information systems.

Front 3

What is the practice of applying a method for describing structure and behavior for an organization's security processes, information security systems, personnel and organizational sub-units, so they align with core goals and strategic direction?

Back 3

Security Architecture

Front 4

Name 4 example architectural frameworks

Back 4

1. DoDAF
2. TOGAF
3. Zachman
4. SABSA

Front 5

What is an Enterprise Security Architecture?

Back 5

Enterprise Security Architecture - a structured high level plan for an IT infrastructure to support a business need

(SABSA is a best practice)

- Unified vision for use of controls to plan/implement in a holistic manner.

Front 6

State Machine, Lattice Based, Matrix Based, Non-Interference and Information Flow are all types of ______________

Back 6

formal Security Models

Front 7

Which Security model is based on objects and attributes?

Back 7

State Machine

Front 8

Which security model defines upper and lower bounds? (floors)

Back 8

Lattice Based

Front 9

Which security model is "if / then"?

Back 9

Matrix Based (RBAC or ACL)

Front 10

Which security model creates barriers between levels to prevent data leakage?

Back 10

Non-Interference Models

Front 11

Which security model controls and monitors data flow between objects at various security levels?

Back 11

Information Flow Models

Front 12

What was the idea within the State Machine Model that kept all computers performing single functions within a physical area?

Back 12

Keeping common tasks grouped was simple to understand and implement. Secure but inflexible. (driven by policy)

Front 13

What was the idea within the State Machine Model that allowed processing at various security levels, with the capability to perform multiple functions?

Back 13

Multi-state Machine (more flexible, less secure)

Front 14

What are the two main State Machine Model systems?

Back 14

Biba and Bell-LaPadula

Front 15

What was the first model for Integrity? It used levels for integrity.

Back 15

Biba System Integrity Model

Front 16

What is the security model that was first setup for Confidentiality? The model’s main goal was to prevent secret information from being accessed in an unauthorized manner. (funded by US Gov)

Back 16

Bell-LaPadula

Front 17

In Biba, what does No WURD mean?

Back 17

No Write Up

No Read Down

Front 18

The Clark & Wilson model provided for?

Back 18

Integrity (Clark & WIlson), like Biba

Front 19

Clark Wilson provided for the 3 integrity goals. What are they?

Back 19

1. Prevent unauthorized users making mods
2. Prevent authorized users from making bad changes.
3. Maintain Internal/external consistency (well-formed transactions)

Front 20

Why was the Brewer-Nash (Chinese Wall) model originated, and how did it perform that function?

Back 20

To prevent fraudulent modifications to objects.

Through the use of dynamic rules.

Front 21

Which security model defined a set of basic rights a subject can use on an object? (eight protection rights)?

Back 21

Graham-Denning Model

Front 22

What is the first security model that changed from lattice-based to a matrix, or access control list?

Back 22

HRU or Harrison-Ruzzo-Ullman Model

Front 23

In the TCSEC (Trusted Computer System Evaluation Criteria) evaluation model, regarding the rainbow series, what is the assurance level book that is typically the correct answer on the exam?

Back 23

Orange book

Front 24

ISO produced a standard (15408) that provided the first international product evaluation criteria, called ____________

Back 24

Common Criteria.

Front 25

In Common Criteria, What is the EAL?

Back 25

Evaluation Assurance Level (1-7, 7, formally verified, is best)

EAL 2 - Structural

EAL 1 - Functional

Front 26

What is the technical evaluation of the security components within a product? (Evaluating product)

Back 26

Certification

Front 27

What is the formal acceptance of the product's overall security? (Accepting Risk)

Back 27

Accreditation

Front 28

What is defined at the total combination of protection mechanisms within a computer system?

Back 28

TCB - Trusted Computing Base

Front 29

In a State Machine Model, what is an activity that can alter the state?

Back 29

A State transition. (The idea is that you start with a secure system, ensure a secure state transition, then you still have a secure system)

Front 30

A system that employs the Bell-LaPadula model is called a __________________because users with different clearances use the system, and the system processes data at different classification levels.

Back 30

multilevel security system

Front 31

Three main rules are used and enforced in the Bell-LaPadula model:

- The simple security rule

- The *-property (star property) rule

- The strong star property rule.

What do they mean?

Back 31

• Simple security rule A subject cannot read data within an object thatresides at a higher security level (the “no read up” rule).
• *- property rule A subject cannot write to an object at a lower securitylevel (the “no write down” rule).
• Strong star property rule For a subject to be able to read and write to anobject, the subject’s clearance and the object’s classification must be equal.

Front 32

Regarding mandatory access control (MAC) systems versus discretionary access control (DAC) systems, what do all Mac systems use?

Back 32

All MAC systems are based on the Bell-LaPadula model, because it allows for multilevel security to be integrated into the code.

Front 33

According to the Clark-Wilson Integrity Model, how are the following used?

Users, TP, CDI, UDI, IVPs

Back 33

Users can modify Unconstrained Data Items (UDIs). To modify a Constrained Data Item (CDI), they utilize a Transformation Procedure (TP), which uses Integrity Verification Procedures (IVPs or rules) to ensure integrity remains intact.

Front 34

In memory mapping, only _____________ can directly access RAM.

Back 34

Trusted processes.

Front 35

What is an abstract machine that controls the access subjects have to objects?

Back 35

Reference Monitor

Front 36

What is the component in the system that enforces and implements the rules of the reference monitor?

Back 36

Security Kernel

Front 37

Regarding the reference monitor, when a subject wants to access an object, what/who do they have to go through?

Back 37

Arbiter

Front 38

What is a TOC/TOU attack?

Back 38

Time of Check/Time of Use attack. Takes advantage of time between functions a system performs.

Also known as a Race Condition, since attacker is racing against system functions.

Front 39

What errors occur with poorly written programs when the length of the data input is more than the processor buffers can handle, causing undesired effects?

Back 39

Buffer Overflow

Front 40

How can you mitigate Buffer Overflow attacks?

Back 40

By verifying input data. (or data validation) (also, good programming)

Front 41

Where is the best place to implement mitigation for buffer overflow attacks?

Back 41

- Both Server and Client is best answer

- Next best is Server

Front 42

What is OWASP (Open Web Application Security Project.)?

Back 42

- Lists most critical web application security risks and their mitigation

- SAMM (Software Assurance Maturity Model) framework for designing and implementing application security strategy

Front 43

What is web-based code that can be transmitted across a network, to be executed by a system or device on the other end,

Back 43

Mobile Code

Front 44

What are the following mobile code threats:

applets, digital signatures, browser add-ins, Updates/patches, XML, SAML, Email

Back 44

- applets: platform independent programs from server to client.

- digital signatures: can verify program creator/integrity

- Browser add-ins: Have numerous vulnerabilities

- updates/patches: need to be tested non-production

- XML: common web database language

- SAML: XML based framework for businesses

- Email: many obvious threats

Front 45

What is it called when an attacker injects malicious script in Web pages?

Back 45

XSS (Cross Site Scripting)

Front 46

Cookies (text files placed by a server to track access), can be mined for data by malicious sites. What category of attack is this?

Back 46

Man-in-the-middle attack

Front 47

How else can man-in-the-middle attack be used?

Back 47

Forced or unauthorized authentication (pretending to be you through stolen credentials)

Front 48

Which systems are more secure (Open or closed)? e.g. Linux vs Windows

Back 48

Open systems are more secure

Front 49

Data exfiltration is the unauthorized transfer of data from a system or network (such as SSNs). What is a tool to help mitigate this problem?

Back 49

Data Leak (or Loss) Protection (DLP)

Front 50

What is a covert channel? What are the 2 types?

Back 50

Sending information in an unauthorized manner using a medium in an unintended way to violate security policy.
Covert Storage and Covert Timing.

Front 51

What is a Rogue attack?

Back 51

unauthorized DHCP server or WAP

Front 52

what is DNS poisoning?

Back 52

Changing DNS resources, or changing good records for bogus ones.

Front 53

What is the system that has data-collecting devices that gather information from a physical region and feed it to embedded processing devices for analysis?

Back 53

Cyber Physical Systems (also term Internet of things (IoT)

Front 54

What is the primary reason for physical security is protecting _______.

Back 54

Protecting life

(systems is secondary)

Front 55

Utilizing Intruder protection Concepts, What is DDDR? (used to minimize operational risk)

Back 55

Deter, Detect, Delay, Respond

Front 56

Regarding physical security, an 8 foot high fence with 3 strands of barbed wire is considered a....

Back 56

deterrent (against a determined intruder)

Front 57

What is a fence with detective controls?

Back 57

PIDAS (Perimeter Intrusion Detection & Assessment System)

Front 58

What is a Bollard?

Back 58

A permanent or retractable post to control traffic and protect property (deterrent)

Front 59

In parking areas, employees should be able to ___________.

Back 59

Walk with 2 candles at least 8 feet high and feel safe...??????

Front 60

What is CPTED (Crime Prevention Through Environmental Design)?

Back 60

Crime Prevention Through Environmental Design - proper design and effective use of the area's environment.

Front 61

What is Natural Surveillance?

Back 61

Good visibility, making intruders feel threat of detection

Front 62

What is Natural Access Control?

Back 62

Limits opportunity for crime by taking steps to clearly identify between public and private space (like boulders and trees making a barrier)

Front 63

What is Territorial Reinforcement?

Back 63

Make users feel at home and they will try to aid in protecting the area.

Front 64

Regarding guards for physical security, what is the good and the bad?

Back 64

Can exercise discernment, but are expensive.

Front 65

T/F Adequate exterior light is necessary on a building (this helps people feel safe and acts as a deterrent)

Back 65

True!

Front 66

Doors are a__________ and should have the same fire rating as the ________. They also need ____ hinges, and should open (out/in?)_________

Back 66

Deterrent, walls, 3, out

Front 67

What are the 3 primary lock types?

Back 67

Something you have (key)

Something you know (passcode)

Something you are (biometrics)

Front 68

What are the two biometric failure rates?

Back 68

Type 1: False negative

Type 2: False positive (worse)

Front 69

What is the rating used to determine appropriate bio-metric device tolerance? The point at which Type I errors equal Type II.

Back 69

CER (Crossover Error Rate)
Note: Lower number is better

Front 70

What is it called when you can move from a less to more secure area?

Back 70

Progressive or Zoned security

Front 71

Cameras are considered what type of control?

Back 71

Detective (but can be deterrent)

Front 72

Data center shouldn't be on top floor, basement, or 1st floor. Why?

Back 72

Top - leaking from roof

Basement - Flooding

1st Floor - control access

Front 73

What are the fire extinguishing clean agents?

Back 73

FM-200

Aero-K

CO2

Front 74

What are the following fire classes:

A, B, C, D?

Back 74

A: Ordinary combustibles (wood/paper)

B: Flammable r combustible liquids (gas)

C: Electrical

D: Combustible metals (magnesium)

Front 75

How far should a fire extinguisher be stored from electrical equipment?

Back 75

50 feet

Front 76

Computer fires are Class ____. Fight them with_____.

Back 76

C, Carbon Dioxide (CO2)

Front 77

What are the sprinkler system types?

Wet pipe, dry pipe, Preaction, Deluge

Back 77

- Wet Pipe: "dirty" water in pipes

- Dry Pipe: only air until action is required, then water

- Preaction: 2-step dry pipe. Filled if hazard exists, then released when verified.

- Deluge: Lots of water floods area rapidly.

Front 78

What type of facility control has to do with construction, site management, personnel controls, awareness training, and emergency response?

Back 78

Administrative

Front 79

What type of facility control has to do with access controls, intrusion detection, alarms, CCTV, HVAC, power supply and fire detection/suppression?

Back 79

Technical

Front 80

What type of facility control has to do with CPTED, fencing, lighting, locks, quality construction materials, bollards, etc.?

Back 80

Physical

Front 81

Hash with a shared secret is a ________?

Back 81

Message Authentication Code (MAC or HMAC)

Front 82

In digital signatures you encrypt the _____, not the ______.

Back 82

hash, file.