Question Results

Score 1 of 1

Question:

Encryption, access control mechanisms, access control lists and remote access authentication protocols are all examples of

Response:

	Technical controls
	Administrative Controls
	Physical Controls
	Both Technical and Administrative

Score 1 of 1

Question:

Which of the following is primarily focused on identifying violations and incidents?

Response:

	Recovery
	Compensating
	Detective
	Preventative
	Corrective

Score 1 of 1

Question:

Which of the following is immediately above the Transport Layer in the OSI model:

Response:

	Presentation
	Session
	Network
	Datalink

Score 1 of 1

Question:

Which of the following is primarily focused on restoring systems and information?

Response:

	Detective
	Preventative
	Recovery
	Corrective
	Compensating

Score 0 of 1

Question:

Which classification of fuel type is grease given?

Response:

	D
	B
	C
	A

Score 0 of 5
(skipped)

Question:

Match the following cryptology tools and technologies

Response:

Match	User answer	Feedback
One-time pads		Still in use in some instances. Recall, one-time pads are the most secure approach
Enigma machine		Electrical lights, mechanical crank/spinwheel
AES, RSA Algorithms		I know, you wanted to think "digital" but technically, electronic works as well
Cipherdisks		Think ceasar's spin wheel here
Single photon emissions		used to provide secure key negotiation. After the test, go google "einstein spooky action" to see what will keep future CISSP's from sleeping at night

Score 1 of 1

Question:

Which of the following is immediately above the Data Link Layer in the OSI model:

Response:

	Network
	Session
	Datalink
	Transport
	Presentation

Score 1 of 1

Question:

Which access control includes job rotation?

Response:

	Technical
	Physical
	Administrative
	Organizational

Score 1 of 1

Question:

Which of the following have the best CER?

Response:

	Iris Scanning
	Badge Scanning
	Hand scanning
	Finger scanning

Score 1 of 1

Question:

Match the following terms to definitions

Response:

Match	User answer	Feedback
Training, configuration management of documentation, risk management	Administrative controls
Firewalls, IDS, encryption	Technical controls
Lighting, Fencing, guard patrols	Physical Controls

Score 1 of 1

Question:

Owner-set permissions are an example of:

Response:

	mandatory access control
	Discretionary access control
	role-based access control
	Clark-Wilson

Score 1 of 1

Question:

Which of the following would be the least useful in attempting to crack a password?

Response:

	Packet sniffing
	MAC the Knife
	LophtCrack
	brute force/dictionary attack
	John the Ripper

Score 1 of 1

Question:

Match the following control types to their purposes

Response:

Match	User answer	Feedback
Reducing Risk	Preventative
Correcting violations and incidents	Detective	Corrective controls also help improve existing preventative and detective controls
Discouraging violations	Deterrent
Providing alternate ways of accomplishing a task	Compensating
Restoring systems and information	Recovery

Score 1 of 1

Question:

Which classification of fuel type are electrical fires given?

Response:

	C
	B
	D
	A

Score 1 of 1

Question:

"The strength of the cryptosystem is a function of the keys, not the algorithm" is also known as

Response:

	Moore's Law
	Rijndael's Challenge
	Kerckhoff's Principle
	Feedback: Auguste Kerckhoff, trying to get the French to clean up their military cryptography back in 1883... seriously kickin' it old school.
	Diffe-Hillman's Axiom