CISSP Flash Cards - Generic

Question 1

Bell-LaPadula

Answer 1

• No read up and No Write down
• To protect Confidentiality

Question 2

Biba

Answer 2

• No read down and No write up
• To protect integrity

Question 3

Lipner

Answer 3

• Can use Bell-LaPadula alone to protect confidentiality
• Or combine Bell-LaPadula and Biba to protect both confidentiality and integrity

Question 4

Brewer Nash or The Chinese Wall Security Model

Answer 4

• Designed to mitigate conflict of interest that arise from hiring third parties (ex. consultants)

Question 5

Graham-Denning model

Answer 5

• Uses an access control matrix (ACM) to map subjects and objects to a series of eight rules

Question 5

Graham-Denning model

Answer 5

• Uses an access control matrix (ACM) to map subjects and objects to a series of eight rules. Each row represents a subject and each column represents either an object or another subject. The point where a row and a column meet contains the rights that the subject row has for accessing the column subject or object

Question 6

Digital Forensics Steps

Answer 6

1- Identification of evidence
2- Acquisition of evidence
3- Analysis of evidence
4- Reporting

Question 7

Incident Response Phases

Answer 7

1- Detection
2- Response
3- Mitigation
4- Reporting
5- Recovery
6- Remediation
7- Lessons Learned

Question 8

Enticing

Answer 8

occurs when an individual who was already planning to commit a crime is eventually lured into doing so at the urging of law enforcement representatives

Question 9

Entrapment

Answer 9

Occurs when an individual who otherwise had no intention of committing a crime is lured into doing so at the urging of law enforcement representatives

Question 10

Rainbow table

Answer 10

can be used to obtain the plaintext of a hashed password. Reversing the hash is accomplished by causing a collision between hash values; a collision occurs when identical inputs are used, which generates an identical hash value. Thus, if an attacker can generate a collision, they might be able to determine the plaintext value of the input

Question 11

Passphrase

Answer 11

password type that is typically longest and contains the fewest random characters

Question 12

Hashing

Answer 12

Used to create digital signatures and to verify the integrity of data

Question 13

Pharming Attacks

Answer 13

are DNS cache poisoning attacks that attempt to modify a DNS cache by providing invalid information to a DNS server. DNSSEC is a set of security extensions intended to make DNS more secure by adding special records to a zone that include digital signatures for the other records in the zone and using those signatures to verify responses to queries of the zone

Question 14

Teardrop Attacks

Answer 14

are Denial of Service (DoS) attacks where an attacker sends several large overlapping IP fragments to the victim system which tries to reassemble these packets, sometimes causing the system to crash

Question 15

ARP

Answer 15

used to resolve IP addresses to MAC addresses

Question 16

NIST SP 800-30

Answer 16

Used to assess risk

Question 17

ITIL

Answer 17

created by the UK Government to improve IT service management processes

Question 18

COBIT

Answer 18

ISACA framework that established 34 processes and 214 control objectives to assist in developing an IT security management plan

Question 19

ISO 27000

Answer 19

established a framework for developing security management standards

Question 20

NIST SP 800-37

Answer 20

Risk Management Framework - is a security compliance framework fir government entities

Question 21

IAB (Internet Activities Board)

Answer 21

establishes standards for unethical behavior on the internet

Question 22

Computer Ethics Institute (CEI)

Answer 22

created the ten commandments of computer ethcs

Question 23

Copyrights

Answer 23

protect art, music, or source code from being used by third party without a license or explicit permission from the owner

Question 24

Trademarks

Answer 24

protect branding such as slogan, logo, or other means of creating a distinction between a product among competitors

Question 25

Patnets

Answer 25

protect the patent holder’s exclusive right to use, create, or sell an invention for a specific period of time

Question 26

NDAs

Answer 26

used to dissuade an individual from revealing trade secrets or other confidential information to third parties

Question 27

Incremental Backup

Answer 27

• only backs up files that have been modified since the last full or incremental backup.
• it clears the archive attribute at the completion of the backup process
• Provide the shortest backup creation time of all backup types but the longer restoration process (requires the full backup and each incremental backup created since the last full backup)

Question 28

Deferential Backup

Answer 28

• includes only the files that have the archive attribute turned on, which indicates they have been modified or created since the last backup
• They do not clear the archive attribute so each successive deferential backup will typically be larger than the previous one
• Restoring data requires the full backup and the most current differential backup

Question 29

Forced Browsing Attack

Answer 29

attack used an attacker is searching for unlinked content on a web server. It’s considered a brute-force attack and be used to access the URL in a browser’s location bar might be able to access the email inbox of the user if appropriate security measures are not in place

Question 30

Double encoding attack

Answer 30

used in attempt to bypass a web application’s existing directory traversal security check.

Question 31

Fuzz testing

Answer 31

involves entering random malformed data as input to discover how the application responds to garbage data

Question 32

Regression testing

Answer 32

performed to ensure that a change has not broken existing functionality or introduced new problems

Question 33

Combinatorial testing

Answer 33

a type of black-box testing where the tester is provided no information about the application being tested

Question 34

Pairwise testin

Answer 34

a form of combinatorial testing involving testing more than one component at a time

Question 35

AH and ESP (Encapsulating Security Payload)

Answer 35

AH (Authentication Header) is typically used in transport ESP mode. ESP provides confidentiality for IPSEC VPN tunnels. AH provides integrity and authentication for IPSEC VPN tunnels. IPSEC operates in transport mode or tunnel mode. In transport mode, ESP encrypts only the packet data leaving the IP headers unencrypted

Question 36

Object reuse

Answer 36

is the process if reusing data or authentication credentials that an application or process has shared in memory or cached to disk

Question 37

US Privacy Act

Answer 37

• Created in 1974 to provide citizens with access to private information that is being collected and maintained by the government

Question 38

OECD Guidlines

Answer 38

privacy policy created in 1980 to provide a framework for how information traverses international borders

Question 39

EU-US Safe Harbor

Answer 39

created in 1998 by the US dept of Commerce for companies in the US to share personal information with EU member nations

Question 40

Piracy

Answer 40

Intellectual property attack that focuses on infringement of copyright