Question Results

Score 1 of 1

Question:

Which of the following are the three components of the fire triangle?

Response:

	Fire/Combustion/Oxygen
	Fire/Fuel/Oxygen
	Heat/Combustion/Oxygen
	Heat/Fuel/Oxygen

Score 1 of 1

Question:

Which of the following is a remote authentication system?

Response:

	TACACS
	OpenVPN
	KERBEROS
	SESAME

Score 0 of 1

Question:

Determining whether a subject can log into a system is an example of

Response:

	Accountability
	Authorization
	Authentication

Score 1 of 1

Question:

What is the ideal humidity level for a data center?

Response:

	20-40%
	30-50%
	40-60%
	60-80%

Score 0 of 1

Question:

Match the following examples to their definitions

Response:

Match	User answer	Feedback
Unpatched servers	Vulnerability
A virus that relies on unpatched code or OS levels	Threat
The likelihood a threat will be realized, the frequency of natural disasters	Exposure
$1M dollars per day downtime	Risk
A proxy server	Countermeasure

Score 0 of 1
(skipped)

Question:

Match the following terms and definitions

Response:

Match	User answer	Feedback
Intended to discourage a potential attacker
Intended to avoid an incident from happening
Fixes component or systems after an incident has occurred
Intended to bring the environment back to production levels
Identify an incidents activities
Alternate measures of control

Score 1 of 5

Question:

Match the following cryptology tools and technologies

Response:

Match	User answer	Feedback
One-time pads	Manual	Still in use in some instances. Recall, one-time pads are the most secure approach
Enigma machine	Mechanical	Electrical lights, mechanical crank/spinwheel
AES, RSA Algorithms	Electronic	I know, you wanted to think "digital" but technically, electronic works as well
Cipherdisks	Electro-mechanical	Think ceasar's spin wheel here
Single photon emissions	Quantum cryptography	used to provide secure key negotiation. After the test, go google "einstein spooky action" to see what will keep future CISSP's from sleeping at night

Score 1 of 1

Question:

Which access control includes training?

Response:

	Technical
	Organizational
	Physical
	Administrative

Score 1 of 1

Question:

"The strength of the cryptosystem is a function of the keys, not the algorithm" is also known as

Response:

	Kerckhoff's Principle
	Feedback: Auguste Kerckhoff, trying to get the French to clean up their military cryptography back in 1883... seriously kickin' it old school.
	Rijndael's Challenge
	Diffe-Hillman's Axiom
	Moore's Law

Score 0 of 1
(skipped)

Question:

Match the following control types to their purposes

Response:

Match	User answer	Feedback
Reducing Risk
Correcting violations and incidents		Corrective controls also help improve existing preventative and detective controls
Discouraging violations
Providing alternate ways of accomplishing a task
Restoring systems and information

Score 0 of 1

Question:

Which access control includes asset classification?

Response:

	Physical
	Technical
	Administrative
	Organizational
	Owner

Score 0 of 1

Question:

Which of the following is NOT an example of biometric identification?

Response:

	Ear shape/pattern
	Hand shape/pattern
	Retinal imagery
	Voice

Score 1 of 1

Question:

Match the following terms to definitions

Response:

Match	User answer	Feedback
Training, configuration management of documentation, risk management	Administrative controls
Firewalls, IDS, encryption	Technical controls
Lighting, Fencing, guard patrols	Physical Controls

Score 0 of 1

Question:

Which of the following would be the least useful in attempting to crack a password?

Response:

	LophtCrack
	MAC the Knife
	John the Ripper
	brute force/dictionary attack
	Packet sniffing

Score 0 of 1

Question:

Which of the following packet switched networks is best suited to support fully meshed VPNs?

Response:

	Frame Relay
	SMDS
	SONET
	ATM
	MPLS