CISSP Domain 3

What technology allows administrators to pinpoint the location of a mobile device?

What is the most important control to apply to smart devices?

What two items does a NoSQL database store?

What key is used to encrypt the contents of a message using PGP?

Which one of the following is NOT critical to the security of one-time pad operations?

The core issues around BYOD relate to ___.

Which of the following layers of the ring model typically contains the LEAST privileged applications and processes?

Key ___ adds security to the use of encryption.

Which is accreditation is granted if security issues exist but system is granted temporary operation authorization?

What type of system is used to gather information from remote sensors via telemetry?

Which one of the following is not a possible hash length from a SHA-2 function?

Which BEST describes the purpose of a lockdown enclosure?

Which one of the following is most susceptible to quantum computing attack?

What is the best defense against cross-site scripting attacks?

Which is the BEST example of secondary storage?

Which is the BEST example of a state attack?

What technique can be used to hide information in the image?

Which of the following security architecture model combines Bell-LaPadula and Biba?

How many keys should be used with 3DES to achieve the greatest level of security?

Which of the following DES modes can leave patterns in the ciphertext?

Bob is planning to use cryptographic cipher that rearranges the characters in a message.What type of cipher below to use

The difficulty of solving what mathematical problem provides the security underlying the Diffie-Hellman algorithm?

Which one of the following is not an effective defense against XSRF attacks?

What algorithm uses the Blowfish cipher along with a salt to strengthen cryptographic keys?

Which is an example of an in-band approach to key exchange?

Alice wants to send a message to Bob using symmetric cryptography, what key does she use to encrypt the message?

Which of the following can mitigate the threat of brute-force attacks that use rainbow tables?

What type of hypervisor runs directly on top of bare hardware?

In what application control approach may users install only approved software on their devices?

Who provides the digital signature on a digital certificate?

What technology can you use as a compensating control when it's not possible to patch an embedded system?

What key should Alice use to encrypt the message if she wants to send message to Bob using RSA encryption?

Which is NOT a correct statement regarding encryption?

What does an attacker typically have access in a brute-force attack?

What action can users take to overcome security flaws in RC4?

What operation uses a cryptographic key to convert plaintext into ciphertext?

What model of cloud computing does not use any shared tenancy resources?

Which one of the following is not a barrier to using the web of trust approach?

What is the simplest way to take an existing cipher and make it stronger?

Which security evaluation standards was developed by council that includes American Express, Discover, Mastercard, Visa

What length encryption key does the Data Encryption Standard use?

Apple devices running current versions of iOS use full device encryption by default.

Which of the following public cloud tiers places most security responsibility in the vendor?

Which describes memory protection technique that can mitigate confidentiality attacks by logically segregating processes

What basic cryptographic functions does the AES algorithm use to encrypt plaintext?

In the early 1990s, the National Security Agency attempted to introduce key escrow using what failed technology?

What character is key to a successful SQL injection attack?

Alice would like to prove to Charlie that message she received actually came from Bob. Which would enforce Alice's goal?

What type of fuzz testing captures real software input and modifies it?

Which BEST describes the purpose of watermarking?