Cissp Review (Fort Gordon Part 2)

Front 1

Coupling

Back 1

level of interaction between objects / less interaction; low coupling is easy to troubleshoot

Front 2

Polymorphism

Back 2

how different objects respond to the same command, i.e., you can give one command and two objects react differently

Front 3

Polyinstantiation

Back 3

two versions of the same object (i.e., Secret and Top Secret)

Front 4

Polymorphic Virus

Back 4

mutates by modifying its own code as it travels from system to system, while still keeping the original algorithm intact; makes pattern recognition hard

Front 5

Primary Key/Foreign Key

Back 5

Used in a relational database. Primary points to foreign; foreign keys reference primary keys

Front 6

Deadlocking

Back 6

two people try to access the same file/record (at same time) and the database locks them both out

Front 7

ACID (lock controls)

Back 7

Atomicity, Consistency, Isolation, Durability

Front 8

Two–Phase Commit

Back 8

dealing with a DB, able to apply all transactions, then it’s committed

Front 9

Asynchronous token

Back 9

uses CHAP; token device (something you have)

Front 10

Mandatory Access Control

Back 10

based on security/sensitivity labels and your clearance

Front 11

Discretionary Access Control

Back 11

Access is based on owners discretion

Front 12

IDS in passive mode

Back 12

logs suspicious activity / generates alerts if the attack is deemed to be severe

Front 13

(IDS) True positive

Back 13

there was an attack and IDS alerted you / malicious activity identified as malicious activity

Front 14

Pre–emptive multi–tasking

Back 14

operating system controls the resource

Front 15

Cooperative multi–tasking

Back 15

application controls the resource

Front 16

Dedicated (security mode)

Back 16

security clearance for all data; approved to access all data; need–to–know for all information access

Front 17

System High (security mode)

Back 17

security clearance for all data; approved to access all data; need–to–know for some information access

Front 18

Bell La–Padula * Security Property

Back 18

no write down.

Front 19

Bell La–Padula Simple Security Property

Back 19

there is no read up

Front 20

Biba Simple Integrity Axiom

Back 20

no read down

Front 21

Biba * Integrity Axiom

Back 21

the * means no write up

Front 22

Clark Wilson

Back 22

focuses on integrity (by having subjects access objects via programs).

Front 23

Brewer and Nash

Back 23

also know as Chinese Wall/goal is to prevent conflicts of interest

Front 24

Graham Denning model (description and commands or primitive rights)

Back 24

made up of subjects, objects, and rights, dealing with 8 commands or primitive rights (create/delete object; create/delete subject; read/grant/delete/transfer access rights)

Front 25

Target of Evaluation (TOE)

Back 25

vendor’s product that they are trying to get evaluated

Front 26

Security Targets

Back 26

vendor’s claim of security…what they’re planning to implement into product (“I will provide”)

Front 27

CPTED

Back 27

Crime Prevention through Environmental Design outlines how the proper design of a physical environment can reduce crime by affecting human behavior. Basically, you design your site in a manner to prevent crime.

Front 28

Brownout

Back 28

prolonged low voltage

Front 29

Static electricity

Back 29

what creates static? Low humidity (below 40%)

Front 30

Different classes of fire extinguishers

Back 30

A, B, C, D, K