Cissp Domain 6 - Security Assessment And Testing (Matt)

Front 1

Regarding auditing (NIST standards), what is the process of exercising one or more assessment objects under specified conditions to compare actual and expected behaviors?

Back 1

Testing

Front 2

Regarding auditing (NIST standards), what is the process of checking, inspecting, reviewing, observing, studying or analyzing one or more assessment objects to facilitate understanding, achieve clarification, or obtain evidence?

Back 2

Examination

Front 3

Regarding auditing (NIST standards), what is the process of conducting discussions with individuals o groups within an organization to facilitate understanding, achieve clarification, or identify the location of evidence.

Back 3

Interviewing

Front 4

What is the difference between a vulnerability assessment and penetration testing?

Back 4

VA - Done by admins

PT - Done by hired hackers

Front 5

For Penetration testing, what are white, grey, and black box?

Back 5

White: have full knowledge of network

Grey: limited knowledge (costs less than black box)

Black: no knowledge (hacker approach)

Front 6

What are the 3 types of pentesting?

Back 6

1. Physical Security
2. Operational Security
3. Electronic Security

Front 7

What is NIST's 800-137 that includes:

Define

Establish

Implement

Analyze/Report

Respond

Review/Update

Back 7

CM - Continuous Monitoring

Front 8

Define:
System Reboot

Emergency Reboot

Cold Start

Back 8

System Reboot: System shuts itself down safely and restarts.
Emergency Reboot: System can't recover and basically restarts in "special or safe mode"
Cold Start: User intervention (manual reboot)

Front 9

What is superzapping?

Back 9

A utility to bypass access controls of an operating system. Administrators can use these for quick changes. Nothing is logged, so attackers can use them for malicious purposes.

Front 10

What is it called when a packet is modified to have the same destination and origin address?

Back 10

Denial Of Service

Front 11

What is another name for a Browsing Attack?

Back 11

Shoulder surfing

Front 12

Juggernaut and Hunt are tools used for what kind of attack?

Back 12

Session Hijacking

Front 13

What is Kerckhoff's principle and why is it relevant?

Back 13

The only secret portion to a cryptosystem should be the key so that the algorithms can be stronger

Front 14

What is required for a secure Vernam cipher?

Back 14

The pad must be used just one time

Front 15

What are the RMF Steps?

Back 15

Cat Sat On it's Assets All Morning...

CSOAAM

Front 16

How are Type 1 and Type 2 Hypervisors different? What is the industry standard?

Back 16

Type 1 - standard, installed from scratch

Type 2: installed over Windows

Front 17

Vulnerability Assessment

Back 17

prioritized list of vulnerabilities and are generally for clients who already understand they are not where they want to be in terms of security. The customer already knows they have issues and simply need help identifying and prioritizing them.

Front 18

Interface Testing

Back 18

check & verify interactions errors are handled properlyuser interrupts any transaction

Front 19

Misuse Case Testing

Back 19

use case from the point of view of an Actor hostile to the system under design

Front 20

Penetration Tests

Back 20

designed to achieve a specific, attacker-simulated goal and should be requested by customers who are already at their desired security posture. A typical goal could be to access the contents of the prized customer database on the internal network, or to modify a record in an HR system.

Front 21

Real User Monitoring (RUM) /

End user experience monitoring (EUM)

Back 21

web monitoring that aims to capture and analyze every transactions

Passive monitoring, relying on web monitoring services that continuously observe system in action,

tracking availability, functionality and responsiveness

Front 22

Synthetic performance monitoring

Back 22

script of user action to track performance

from external, so better to assessing site availability and network problems

Front 23

Security Metrics

Back 23

data collected from one or more security control, such as

. the number and severity of vulnerabilities revealed

. number of unauthorized access attempts

. configuration baseline information

. contigency plan testing dates and results

. number of employees who are current on awareness training requirements

. risk tolerance thresholds

. risk score associated

Front 24

Various of test

Back 24

Checklist Test

- Copies of BCP are distributed to the different departments and functional areas for review

Structured walk through test

- representative from each department or functional area come together and go over the plan

Parallel test

- perform test on alternate offisite facility

Full interruption test

- original site is shut down, and processing takes place at alternate site

Front 25

Zero Knowledge test

Back 25

Team does not have any knowledge of the target and must start from ground zero

Front 26

Partial knowledge

Back 26

Some information about the target

Front 27

Full knowledge

Back 27

intimate knowledge of the target

Front 28

Blind test

Back 28

Assessor only have publicly available data to work with

Front 29

Double blind test / Stealth assessment

Back 29

security staff is not notified

Front 30

Targeted Test

Back 30

external consultant and staff carrying out focused test on specific area of interest