Question Results

Score 1 of 1

Question:

John's computer access changed with his reassignment to a new department. This is an example of:

Response:

	Access List Control
	Role-based access control
	Owner set access control
	Need-to-Know control
	Mandatory access control

Score 0 of 1

Question:

Which of the following is NOT an example of SSO?

Response:

	KErberos
	SESAME
	KryptoKnight
	LDAP

Score 1 of 1

Question:

Which of the following is primarily focused on identifying alternate solutions to achieve a task?

Response:

	Preventative
	Compensating
	Recovery
	Corrective
	Detective

Score 1 of 1

Question:

Match the following control types to their purposes

Response:

Match	User answer	Feedback
Reducing Risk	Preventative
Correcting violations and incidents	Recovery	Corrective controls also help improve existing preventative and detective controls
Discouraging violations	Deterrent
Providing alternate ways of accomplishing a task	Compensating
Restoring systems and information	Recovery

Score 3 of 5

Question:

Match the following cryptology tools and technologies

Response:

Match	User answer	Feedback
One-time pads	Manual	Still in use in some instances. Recall, one-time pads are the most secure approach
Enigma machine	Mechanical	Electrical lights, mechanical crank/spinwheel
AES, RSA Algorithms	Electronic	I know, you wanted to think "digital" but technically, electronic works as well
Cipherdisks	Mechanical	Think ceasar's spin wheel here
Single photon emissions	Quantum cryptography	used to provide secure key negotiation. After the test, go google "einstein spooky action" to see what will keep future CISSP's from sleeping at night

Score 1 of 1

Question:

Which of the following are the three components of the fire triangle?

Response:

	Fire/Combustion/Oxygen
	Heat/Fuel/Oxygen
	Fire/Fuel/Oxygen
	Heat/Combustion/Oxygen

Score 0 of 1

Question:

Match the following terms and definitions

Response:

Match	User answer	Feedback
Intended to discourage a potential attacker	Deterrent
Intended to avoid an incident from happening	Preventive
Fixes component or systems after an incident has occurred	Recovery
Intended to bring the environment back to production levels	Corrective
Identify an incidents activities	Detective
Alternate measures of control	Compensating

Score 1 of 1

Question:

Which of the following is primarily focused on reducing risk?

Response:

	Corrective
	Recovery
	Deterrent
	Detective
	Preventative

Score 1 of 1

Question:

Match the following terms to definitions

Response:

Match	User answer	Feedback
Training, configuration management of documentation, risk management	Administrative controls
Firewalls, IDS, encryption	Technical controls
Lighting, Fencing, guard patrols	Physical Controls

Score 1 of 1

Question:

Which of the following is NOT a RAW authentication protocol?

Response:

	PAP
	LDAP
	CHAP
	EAP

Score 1 of 1

Question:

Motion detectors, video cameras, fences, locked doors, guards and dogs are all examples of

Response:

	Physical controls
	Administrative controls
	Both Technical and Administrative controls
	Technical controls

Score 1 of 1

Question:

Match the following examples to their definitions

Response:

Match	User answer	Feedback
Unpatched servers	Vulnerability
A virus that relies on unpatched code or OS levels	Vulnerability
The likelihood a threat will be realized, the frequency of natural disasters	Risk
$1M dollars per day downtime	Exposure
A proxy server	Countermeasure

Score 1 of 1

Question:

Match the following key terms

Response:

Match	User answer	Feedback
Availability	Reliable and timely access to data and resources
Confidentiality	Necessary level of secrecy, unauthorized disclosure is prevented
Shoulder surfing	Unauthorized viewing of information (screen peeking)
Social Engineering	Tricking someone into giving sensitive information (to gain unauthorized access)

Score 1 of 1

Question:

Which classification of fuel type is gasoline given?

Response:

	D
	C
	A
	B

Score 1 of 1

Question:

Which access control protects the entire system?

Response:

	Access Control Lists
	Firewalls/IPS
	Data Access Controls
	Operating System Controls/Policies
	System Access Controls