Cissp Study Cards

Front 1

Of the following answers, which is BEST described by:- Standardized lookup protocol that allows queries to be made of directories- Is an application protocol for accessing and maintaining distributed directory information services over an IP network- It is based on the X.500 standard- Runs on Port 389 TCP and UDP- Uses port 636 over SSL

Back 1

LDAP - Lightweight Directory Access Protocol

Front 2

In regards to testing of Software, which of the following is an advantage in using a bottom-up versus a top-down approach to software testing?

Back 2

Errors in critical modules are detected earlier.

Front 3

What is the condition called where users are allowed to enter any information of unlimited amount into a web application?

Back 3

Unvalidated Input

Front 4

A security kernel is defined as a strict implementation of a reference monitor mechanism responsible for enforcing a security policy. To be secure, the kernel must meet three basic conditions, what are they?

Back 4

Completeness, Isolation, and Verifiability

Front 5

_________ are automated tools that are designed to hide the presence of the attacker by changing valid binaries, hiding within a system, and often time embedding itself within the kernel as a module.

Back 5

Rootkit

Front 6

What is the BEST definition of SQL injection?

Back 6

SQL injection is an input validation problem.

Front 7

Which of the following answers best describes the types of viruses which completely rewrite themselves as they move from host to host so as to evade antivirus scanners?

Back 7

Polymorphic Code

Front 8

The sort of virus that surrounds the host program's code is called which of the following answers?

Back 8

Shell Virus

Front 9

Which of the following best describes the type of DOS attack that floods traffic to a high-speed internet backbone router with the source address of the target thus eliciting massive responses to the intended target?

Back 9

Reflective DDoS Attack

Front 10

Which web application attack sends unexpected database commands to the application in an attempt to divulge otherwise protected information?

Back 10

SQL Injection Attack

Front 11

What might be one of the biggest barriers to detecting buffer overflow attacks as they occur on your network?

Back 11

Encryption

Front 12

Suppose you are a network IT Manager for a medium-sized business and as part of an upgrade process you wish to replace the time sheet management suite employees use to log the hours for which they get paid.You want to be sure there are ZERO problems with this rollout by training users, validating the time sheet server software and monitoring the deployment to react to any unforeseen problems.What is this process called?

Back 12

Change Management

Front 13

In a Botnet, what is the term used to describe one of the individual computers part of the botnet?

Back 13

A Zombie

Front 14

random data is fed into programs or protocols to see if they will crash or fail into a vulnerable state causing a security vulnerability or revealing useful information for hackers?

Back 14

Fuzzing

Front 15

Kerberos depends upon what encryption method?

Back 15

Secret Key cryptography.

Front 16

Which of the following encryption methods is known to be unbreakable?

Back 16

One-time pads.

Front 17

Who can best decide what are the adequate technical security controls in a computer-based application system in regards to the protection of the data being used, the criticality of the data, and it's sensitivity level ?

Back 17

Data or Information Owner

Front 18

PGP uses which of the following to encrypt data?

Back 18

A symmetric encryption algorithm

Front 19

The number of violations that will be accepted or forgiven before a violation record is produced is called which of the following?

Back 19

clipping level

Front 20

In biometrics, the "one-to-one" search used to verify claim to an identity made by a person is considered:

Back 20

Authentication

Front 21

Which of the following would be best suited to oversee the development of an information security policy?

Back 21

Security Officers

Front 22

What is the main difference between a Smurf and a Fraggle attack?

Back 22

A Smurf attack is ICMP-based and a Fraggle attack is UDP-based.

Front 23

Which of the following is NOT a common database model ?

Back 23

NOT Sequential

Hierarchical, Relational, Network

Front 24

Why are coaxial cables called "coaxial"?

Back 24

it includes one physical channel that carries the signal surrounded (after a layer of insulation) by another concentric physical channel, both running along the same axis

Front 25

Which of the following is NOT a characteristic of a host-based intrusion detection system?

Back 25

A HIDS does not consume large amounts of system resources

Front 26

The IP header contains a protocol field. If this field contains the value of 51, what type of data is contained within the ip datagram?

Back 26

Authentication Header

Front 27

What would BEST define a covert channel?

Back 27

A communication channel that allows transfer of information in a manner that violates the system's security policy.

Front 28

What do the ILOVEYOU and Melissa virus attacks have in common?

Back 28

They are both masquerading attacks.

Front 29

Which of the following statements pertaining to quantitative risk analysis is FALSE?

Back 29

It requires little experience to apply

Front 30

A common way to create fault tolerance with leased lines is to group several T1s together with an inverse multiplexer placed:

Back 30

at both ends of the connection.

Front 31

Which of the following statements pertaining to biometrics is false?

Back 31

Biometrics are based on the Type 2 authentication mechanism.

type 1 is something you know,

type 2 is something you have

type 3 is something you are

Biometrics are based on the Type 3 authentication mechanism.

Front 32

What protocol is used to match an IP address to the appropriate hardware address of the packet's destination so it can be sent?

Back 32

Address resolution protocol (ARP)

Front 33

What can be defined as an instance of two different keys generating the same ciphertext from the same plaintext?

Back 33

Key clustering

Front 34

What is the main objective of proper separation of duties?

Back 34

To ensure that no single individual can compromise a system

Front 35

What assesses potential loss that could be caused by a disaster?

Back 35

The Business Impact Analysis (BIA)

Front 36

Which of the following biometric devices has the lowest user acceptance level?

Back 36

Retina Scan

Front 37

When should a post-mortem review meeting be held after an intrusion has been properly taken care of?

Back 37

Within the first week of completing the investigation of the intrusion

Front 38

Which of the following ISO/OSI layers performs transformations on data to provide a standardized application interface and to provide common communication services such as encryption?

Back 38

Presentation layer

Front 39

What can best be defined as a strongly protected computer serving as a gateway between a trusted and untrusted network that gives limited, authorized access to untrusted hosts?`

Back 39

Bastion Host

Front 40

Which of the following is a peer entity authentication method for PPP that uses a randomly-generated challenge and requires a matching response that depends on a cryptographic hash of the challenge and a secret key?

Back 40

Challenge Handshake Authentication Protocol

Front 41

A Business Impact Analysis is one element in business continuity planning. What are the three primary goals of a BIA?

Back 41

Criticality prioritization, downtime estimation, and resource requirements.

Front 42

At which layer of ISO/OSI does the fiber optics work?

Back 42

Layer 1 - Physical

Front 43

What is the MOST important step in business continuity planning?

Back 43

Business Impact Analysis (BIA)

Front 44

If your network is under attack from an ICMP Flood attack what value of the incoming packets would need to be faked making it nearly impossible to determine from where the attack was originating?

Back 44

Source IP Address

Front 45

Which of the following is most appropriate to notify an internal user that session monitoring is being conducted?

Back 45

Written agreement

Front 46

Layer 2 of the OSI model has two sublayers. What are those sublayers, and what are two IEEE standards that describe technologies at that layer?

Back 46

LLC and MAC; IEEE 802.2 and 802.3

Front 47

CobiT was developed from the COSO framework. Which of the choices below best describe the COSO's main objectives and purpose?

Back 47

›COSO main purpose is to help ensure fraudulent financial reporting cannot take place in an organization

Front 48

Which attack would you be seeing if you saw a SYN packet with the source and the destination as the same address?

Back 48

LAND attack

Front 49

What sort of attack is described by the following: An attacker has a list of broadcast addresses which it stores into an array, the attacker sends a spoofed ICMP ECHO request to each of those addresses in series and starts again. The spoofed IP address used by the attacker as the source of the packets is the target/victim IP address.

Back 49

Smurf Attack

Front 50

Which of the following answers BEST describes the process of reporting on unauthorized activities on your database servers?

Back 50

DAM - Database Activity Monitoring

Front 51

Which form of password cracking relies on lists of pre-computed password hashes to speed up the time it takes to correctly guess a password?

Back 51

Rainbow Tables

Front 52

Which of the following comparisons are used for identification and authentication in a biometric system?

Back 52

One-to-many for identification and one-to-one for authentication

Front 53

Which of the following statement correctly describes the difference between black box testing and white box testing?

Back 53

lack box testing focuses on functional operative effectiveness where as white box assesses the effectiveness of software program logic

Front 54

Which of the following ACID property in DBMS requires that each transaction is "all or nothing"?

Back 54

Atomicity

Front 55

Which layer in the OSI model is responsible for routing and forwarding of network packets?

Back 55

Network Layer

Front 56

Which of the following statements INCORRECTLY describes circuit switching technique?

Back 56

Packet uses many different dynamic paths to get the same destination

Circuit SwitchingCircuit switching is a methodology of implementing a telecommunications network in which two network nodes establish a dedicated communications channel (circuit) through the network before the nodes may communicate.

Front 57

This standard provides principles, framework and a process for managing risk. It can be used by any organization regardless of its size, activity or sector.

Back 57

ISO/IEC 31000

Front 58

Clipping Level

Back 58

Establishes a baseline for violation activities that may be normal user errors. Only after this baseline is exceeded is a violation record produced. This solution is particularly effective for small- to medium-sized installations. Organizations with large-scale computing facilities often track all violations and use statistical routines to cull out the minor infractions (e.g., forgetting a password or mistyping it several times).

Front 59

Management Controls

Back 59

Management controls focus on the management of the IT security system and the management of risk for a system.

Front 60

Network Level hijack

Back 60

Network-level hijacks involve deriving HTTP sessions via network sniffing of HTTP packets between victim and server.

Front 61

Application Level Hijacks

Back 61

Application-level hijacks by either brute force guessing HTTP session IDs or some other method of determining session IDs. Weak session IDs can be guessed by flooding attempts at the server.

Front 62

Smurf Attack

Back 62

The Smurf Attack is a denial-of-service attack in which large numbers of Internet Control Message Protocol (ICMP) packets with the intended victim's spoofed source IP are broadcast to a computer network using an IP Broadcast address.

Front 63

In which of the following WAN message transmission technique does two network nodes establish a dedicated communications channel through the network before the nodes may communicate?

Back 63

Circuit Switching

Front 64

Methodology of implementing a telecommunications network in which two network nodes establish a dedicated communications channel (circuit) through the network before the nodes may communicate.

Back 64

Circuit switching