Question Results

Score 0 of 1

Question:

Match the following terms and definitions

Response:

Match	User answer	Feedback
Intended to discourage a potential attacker	Deterrent
Intended to avoid an incident from happening	Preventive
Fixes component or systems after an incident has occurred	Recovery
Intended to bring the environment back to production levels	Corrective
Identify an incidents activities	Detective
Alternate measures of control	Compensating

Score 1 of 1

Question:

Clark-Wilson focuses primarily on:

Response:

	Address Integrity
	Accessibility
	Availability
	Confidentialty
	Authentication

Score 1 of 1

Question:

More key terms from Chapter 2

Response:

Match	User answer	Feedback
Weakness or lack of a countermeasure	Vulnerability
Entity that can exploit a vulnerability	Threat agent
The danger of having a vulnerability exploited	Threat
The probability of a threat being realized	Risk
Presence of a vulnerability which exposes the organization	Exposure

Score 5 of 5

Question:

Match the following cryptology tools and technologies

Response:

Match	User answer	Feedback
One-time pads	Manual	Still in use in some instances. Recall, one-time pads are the most secure approach
Enigma machine	Electro-mechanical	Electrical lights, mechanical crank/spinwheel
AES, RSA Algorithms	Electronic	I know, you wanted to think "digital" but technically, electronic works as well
Cipherdisks	Mechanical	Think ceasar's spin wheel here
Single photon emissions	Quantum cryptography	used to provide secure key negotiation. After the test, go google "einstein spooky action" to see what will keep future CISSP's from sleeping at night

Score 1 of 1

Question:

Determining whether a subject can log into a system is an example of

Response:

	Authorization
	Accountability
	Authentication

Score 1 of 1

Question:

Match the following terms to definitions

Response:

Match	User answer	Feedback
Training, configuration management of documentation, risk management	Administrative controls
Firewalls, IDS, encryption	Technical controls
Lighting, Fencing, guard patrols	Physical Controls

Score 1 of 1

Question:

Which of the following is immediately above the Data Link Layer in the OSI model:

Response:

	Transport
	Network
	Presentation
	Datalink
	Session

Score 1 of 1

Question:

Bell-La Padula focuses primarily on:

Response:

	Availability
	Data Integrity
	Authentication
	Accessibility
	Confidentialty

Score 1 of 1

Question:

Which of the following is NOT an example of biometric identification?

Response:

	Ear shape/pattern
	Voice
	Hand shape/pattern
	Retinal imagery

Score 1 of 1

Question:

Which of the following packet switched networks is best suited to support fully meshed VPNs?

Response:

	SMDS
	Frame Relay
	MPLS
	ATM
	SONET

Score 1 of 1

Question:

A WAN is

Response:

	the Westinghouse Address Naming convention
	one of the Wilson-Adder Need types
	a Wide Area Network
	a Working Authentication Name
	a Wide Array Node

Score 1 of 1

Question:

Which of the following have the best CER?

Response:

	Badge Scanning
	Hand scanning
	Finger scanning
	Iris Scanning

Score 1 of 1

Question:

Which OSI layer includes the LLC and MAC sub-layers?

Response:

	Network
	Data Link
	Physical
	Transport
	Session

Score 1 of 1

Question:

"The strength of the cryptosystem is a function of the keys, not the algorithm" is also known as

Response:

	Rijndael's Challenge
	Diffe-Hillman's Axiom
	Kerckhoff's Principle
	Feedback: Auguste Kerckhoff, trying to get the French to clean up their military cryptography back in 1883... seriously kickin' it old school.
	Moore's Law

Score 1 of 1

Question:

Which of the following is NOT a RAW authentication protocol?

Response:

	EAP
	LDAP
	CHAP
	PAP