stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CISSP Battle Flashcards | StudBud
Explore
/
CISSP Battle
CISSP Battle
40 terms
·
StudBud Administration
·
92 plays
CISSP Battle
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
What is the primary purpose of Kerberos
Accountability
Authentication
Integrity
Confidentiality
2
Which of the following is the most important aspect of security?
Physical Security
Intrusion Detection
Logical Security
Awareness Training
3
Which of the following is an example of a Type 2 Authentication Factor
Something you are
Something in the way
Something you do
Something you have
4
CISSP: If a company has a high turnover rate, which access control structure is best?
Decentralized
Role-based
Rule Based
Discretionary
5
CISSP: A custodian is responsible for securing resources after who has assigned the resource a label
Senior Management
Data Owner
Auditor
Security Staff
6
What is the most common cause of failure for water based fire suppression system?
Ionization Detectors
People
Drop Ceiling Locations
Water shortage
7
Why is Spam so difficult to stop?
This attack requires minimal expertise
Source IP is usually Spoofed
Filters are ineffective
Spam can cause a DOS
8
CISSP: How many possible keys exist in a 4 bit key space?
8
16
4
128
9
Which of the following IP addresses is not a private IP address?
10.0.0.8
192.168.6.43
172.31.8.204
169.254.1.119
10
What is the most important goal of all security solutions
Human Safety
Preventing information disclosure
Sustaining Availability
Maintaining Integrity
11
What would an organization do to identify weakness?
Asset Valuation
Vulnerability Analysis
Access Review
Threat Modeling
12
What University is our bootcamp at?
University of Los Angeles
Faber College
Georgia Tech
Adams College
13
CISSP: Which of the following statements is True
the less complex a system, the less trust it provides
the more complex a system, the less assurance it provides
the more complex a system the greater attack surface
the less complex a system, the more vulnerabilities it has
14
CISSP: Which of the following is most likely to detect a Dos Attack
Host Based IDS
Penetration Testing
Vulnerability Scanner
Network Based IDS
15
CISSP: What is the length of a message digest produced by MD5
256 bits
384 bits
64 bits
128 bits
16
What are the necessary components of a smurf attack?
Web server, attacker, and fragment offset
Fragment offset, amplifying network, and victim
Victim, amplifying network, and attacker
DNS server, attacker, and web server
17
What type of attack detects flaws in smartcards
Whaling
Motherboard Washing
Side-Channel Attack
Rainbow Table Attack
18
CISSP: At What layer of the OSI model does a router operate?
Network Layer
Transport Layer
Intrusion Layer
Partition Layer
19
CISSP: What Kind of Attack makes the Ceasar Cipher virtually unusable?
Transposition Attack
Frequency Analysis Attack
Escrow Attack
Meet-me-in-the-Middle Attack
20
What can you use to prevent users from rotating between 2 passwords?
Password History
Password Complexity
Password Length
Password Age
21
CISSP: Most computer-related documents are categorized as which of the following types of evidence?
Direct evidence
Corroborative evidence
Circumstantial Evidence
Hearsay evidence
22
Which tool can be used to improve the effectiveness of a brute force cracking attack?
Wireshark
TKIP
Rainbow Tables
AJAX Screening
23
CISSP: What type of detected incident allows the most time for an investigation?
Malicious Code
Denial of Service
Scanning
Compromise
24
What is the most common form of perimeter security devices or mechanisms?
Fences
Lighting
Moats
Security Guards
25
CISSP: Which Authentication Protocol offers no encryption or protection for login credentials?
CHIP
PIP
CHAP
PAP
26
What is the ideal humidity range for a computer room
80 – 95%
40 – 60%
20 – 40%
60 – 75%
27
Type of memory chip can be erased only when it is exposed to a type of ultraviolet light
PROM
EPROM
EEEEEEPROM
EEPROM
28
CISSP: What is derived from a passphrase?
A personal password
A user Id
A valid Password
A virtual password
29
At what voltage level can static electricity cause destruction of data stored on hard drives
1500
4000
40
17000
30
If you are the victim of a bluejacking attack, what was compromised?
your cell phone
your browser
your firewall
your switch
31
When correctly implemented what is the only cryptosystem known to be unbreakable?
One-Time Pad
Substitution Cipher
Transposition Cipher
AES
32
What type of access controls rely on the use of labels
Mandatory
Discretionary
Role Based
Non Discretionary
33
Which of the following is not a routing protocol?
OSPF
BGP
RIP
RPC
34
CISSP: What crypto Algorithm forms the basis of the El Gamal cryptosystem
Diffe-Helman
3DES
RSA
IDEA
35
Which of the following technologies is considered flawed and should not be used for wireless?
TLS
WEP
PTOP-AIC
SHA-2
36
CISSP: Amy got a digitally signed msg from Bob, what key does she use to verify the msg came from Bob
Bobs Private Key
Bobs Public Key
Amy’s Private Key
Amy’s Public Key
37
CISSP: What Security Model addresses data confidentiality?
Brewer and Nash
Biba
Bell-Lapadula
Clack-Wilson
38
What is an access Object?
Sequence of valid access types
A user or process that wants to access a resource
A list of valid access rules
A resource a user or process wants to access
39
What firewalls are third generation firewalls?
Application level gateway
Circuit-level gateway
Stateful Inspection
Kerberos Firewalls
40
CISSP: Auditing is a required factor to sustain and enforce what?
Accountability
Confidentiality
Accessibility
Redundancy
