CISSP Lesson 2 PreTest

Question 2

Which is not a criterion for classifying data?
A) Age of data
B) The code page used to store the data
C) Personal association

Answer 2

The code page used to store the data

Question 3

A host-based Intrusion Detection System (IDS) samples all packets that pass through a particular point on a network.
A) TRUE
B) FALSE

Answer 3

FALSE

Question 4

Which is an example of an administrative detective control?
A) Antivirus software
B) Encryption
C) Performance review

Answer 4

Performance review

Question 5

Which are types of Biometric authentication? Choose all that apply.
A) Signature
B) Keystroke pattern
C) Retina scan
D) Voice pattern

Answer 5

Signature
Keystroke pattern
Retina scan
Voice pattern

Question 6

Which is a physical access control?
A) Protect all data all the time
B) Protect the easiest data to control
C) Protect only what must be protected

Answer 6

Protect all data all the time

Question 7

Who is ultimately responsible for data security?
A) Owner
B) Custodian
C) User

Answer 7

Owner

Question 8

Kerberos can use the same key for encryption and decryption.
A) TRUE
B) FALSE

Answer 8

TRUE

Question 9

RADIUS is an example of which kind of authentication?
A) Decentralized
B) Centralized

Answer 9

Centralized

Question 10

Which are administrative access controls? Choose all that apply.
A) Hiring practices
B) Policies and procedures
C) Security awareness training
D) Monitoring

Answer 10

Hiring practices
Policies and procedures
Security awareness training
Monitoring

Question 11

Which is an example of a technical preventative control?
A) Access card
B) Badge
C) Database view

Answer 11

Database view

Question 12

Network architecture is an example of a logical access control.
A) TRUE
B) FALSE

Answer 12

TRUE

Question 13

Which is an example of type 1 authentication?
A) User ID
B) One-time password
C) PIN

Answer 13

PIN

Question 14

Asynchronous devices are generally less secure than synchronous devices.
A) TRUE
B) FALSE

Answer 14

FALSE

Question 15

In a hybrid model, where should high-security objects be placed?
A) Centralized authentication mechanism
B) Decentralized authentication mechanism

Answer 15

Centralized authentication mechanism

Question 16

__________ is an entity that requests access to data.
A) Data owner
B) Subject
C) Custodian

Answer 16

Subject

Question 17

Which statement describes dictionary attacks?
A) Saturates the network to render access impossible
B) Attempts to gain access using exhaustive input
C) Uses a list of commonly used passwords to attempt to gain access

Answer 17

Uses a list of commonly used passwords to attempt to gain access

Question 18

On what is nondiscretionary access control based?
A) Roles
B) Rules
C) Identity

Answer 18

Roles