Cissp Lesson 4`

Front 1

What are the 6 stages to the Software Life Cycle

Back 1

1. Initiation - Key phase, prjct proposal and risk analysis.
2. Analysis - security requirements and Baselines outlined.
3. System Specification - explores how the software will interact with networks, internet, etc.
4. Design and Development - Actual code is created.
5. Implementation - software project released & installed. accreditation and certification are initiated and completed.
6. Maintenance - any software changes or updates. Continuous audit.

Front 2

Waterfall Software Development Model

Back 2

Requires edit completion before moving to the next phase. No changes are allowed to a past phase.

Front 3

Name 3 different Waterfall Software Development Models

Back 3

1. Computer Aided Software Engineering(CASE) - commonly used with large projects.
2. Structured Programming Development Model(SPDM) - often pieces are developed separately.
3. Systems Development Life Cycle(SDLC) - Uses project management to control development.

Front 4

Iterative Software Development Model

Back 4

A method of designing and creating software that separates a project into smaller more manageable pieces, allowing independent development of each piece.

Front 5

Name 3 different Iterative Software Development Models

Back 5

1. Object Oriented Programming(OOP) - canned code i.e. VB, Java.
2. Sprial Model - uses prototypes
3. Cleanroom - used when projects need accreditation and certification.

Front 6

Name 2 different Iterative Software Development Model Types

Back 6

1. Joint Analysis Development (JAD) - Involves end users and developers during all phases
2. Rapid Application Development(RAD) - uses unmovable deadlines to drive the project

Front 7

Basic Constructive Cost Model(COCOMO)

Back 7

Determines the total number of months a project will take to complete.

Front 8

Detailed COCOMO

Back 8

Determines development time and cost using the basic method as well as personnel and hardware constraints, tools, etc.

Front 9

Function Point Measurement Model

Back 9

Determines development time using input types from both external and internal sources, file types, and external inquiries.

Front 10

Software Life Cycle Model(SLIM)

Back 10

Determines the total number of months a project will take to complete and its cost using the number of software instructions for a simple project to estimate the end result.

Front 11

Software Capability Maturity Model

Back 11

A five level model that evaluates an organization's software development process. Higher levels of maturity indicate the project's dedication to improvement. Lower levels of maturity indicate a lack of procedure.

Front 12

Name the 5 levels of the Software Capabiltiy Maturity Model

Back 12

1. Initiate
2. Repeatable
3. Defined
4. Managed
5. Optimized

Front 13

Name the 3 processed for Change Control

Back 13

1. Request
2. Process
3. Release

Front 14

Configuration Management

Back 14

Is a mechanism that monitors the entire Software Life Cycle. It addresses change control and ensures all personnel remain accountable for their part of the process.

Front 15

Common Object Request Broker Architecture(CORBA)

Back 15

Allows all components to process requests and responses from each other.

Front 16

Component Object Model(COM)

Back 16

Addresses software components and their functions. Functions are not dependent on rules of language

Front 17

Distributed Componenet Object Model (DCOM)

Back 17

Same as COM but works with distributed systems.

Front 18

Object Linking and Embedding (OLE)

Back 18

Allows computer wide components to function with all software types.

Front 19

Open Database Connectivity (ODBC)

Back 19

Allows for database access using SQL

Front 20

Object Request Broker (ORB)

Back 20

Addreses System components.

Front 21

What are the 2 types of Artificial Intelligence(AI)

Back 21

1. Expert Systems - software program designed to answer complex questions in the form of a human export. Can incorporate fuzzy logic.
2. Neural Networks - Functions similar to the human brain.It learns over time. Also can use fuzzy logic.

Front 22

Security Controls

Back 22

The mechanisms used to handle software threats. No single control will address all possible threats. (i.e. secure state, AV, Backup, Password, Security kernal)

Front 23

Distributed Database System

Back 23

Utilizes data from multiple source databases, which reside in different places.

Front 24

Hierarchical Database System

Back 24

Utilizes a tree structure with all data stemming from a root and branching into parent and child relationship

Front 25

Object Oriented Database System

Back 25

Utilizes multiple data types, which are located using objects stored in the data keying tothe actual item (i.e. active directory)

Front 26

Relational Database System

Back 26

Utilizes a column and row data orientation with headers and primary keys to locate attributes (i.e. Access)

Front 27

What are the 3 types of Database Integrity?

Back 27

1. Entity integrity - ensures data rows have a unique identity.
2. Referential integrity - ensures an identifier from one table references an existing correct identifier in another.
3. Semantic integrity - ensures that database rules are enforced.

Front 28

Data Warehouse

Back 28

Database management mechanism that allows the storing of data from multiple databases. It requires all data to be of similar type.

Front 29

Data Mining

Back 29

A method of analyzing that data stored within a data warehouse. Performed using queries.

Front 30

Aggregation Database Threat

Back 30

Access of part of classified information by unauthorized users.

Front 31

Bypass Attacks

Back 31

Going around security mechanisms to access unauthorized information.

Front 32

Concurrency Database Threat

Back 32

Simultaneous activity on a single point of data

Front 33

Contamination

Back 33

Incorrect or incomplete data is entered into the database

Front 34

Deadlocking

Back 34

Simultaneous attempts to access a single point of data, causing both users to be denied access.

Front 35

Polyinstantiation Database Threat

Back 35

Storing of identical data in multiple locations.

Front 36

Online Transaction Processing (OLTP)

Back 36

Using unauthorized query tools to access the database.