CISSP Domain 1:CISSP- Domain 2:CISSP (All Domains): Official (ISC)²: CISSP:CISSP Domain 5:CISSP - Domain 1: CISSP - Domain 1 Study Guide; CISSP Package Deal: Updated A+ Guide Score Solution

In our access control implementations, keeping the IAAA model in mind, which of these could we use for authorization? (Ans- We use Access Control models to determine what a subject allowed to access. This could be with RBAC (Role Based Access Control). Jane is tasked with looking at federated ident...

Administrative Controls (Ans- Procedures implemented to define the roles, responsibilities, policies, and administrative functions needed to manage the control environment. Annualized Rate of Occurrence (ARO) (Ans- An estimate of how often a threat will be successful in exploiting a vulnerability o...

Angela is an information security architect at bank and has been assigned to ensure that transactions are secure as they traverse the network. She recommends that all transactions us TLS. What threat is she most likely attempting to stop, and what method is she using to protect against it? (Ans- Sni...

Identification (Ans- Is the process by which a subject professes an identity and accountability is initiated. Authentication (Ans- The process of verifying or testing that the claimed identify is valid is authentication. Authorization (Ans- The process of authorization ensures that the requested a...

Bastion hosts (Ans- Serve as a gateway between a trusted and untrusted network that gives limited, authorized access to untrusted hosts. Bridges (Ans- Layer 2 devices that filter traffic between segments based on Media Access Control (MAC) addresses. Common application service element (CASE) (Ans-...

Which of the following contains the primary goals and objectives of security? A. A network's border perimeter B. The CIA Triad C. A stand-alone system D. The Internet (Ans- B. The primary goals and objectives of security are confidentiality, integrity, and availability, commonly referred to as the...

Which of the following are NOT operating modes of the DES encryption algorithm? A) CBC B) ECB C) CFB D) OFB E) CBE (Ans- e. DES has four modes of operations: CBC - Cipher Block Chaining. In CBC mode, each plaintext block is XORed with the previous cipher text block and then encrypted. ECB - ...

Authentication (Ans- proof and verification of information Identification (Ans- identity verification Confidentiality (Ans- Protection from unauthorized viewing Availability (Ans- Maintaining system usability Permissive (Ans- allow by default Restrictive (Ans- deny by default Defense in depth ...

Data Remanence (Ans- The remains of partial or even the entire data set of digital information Disaster Recovery Planning (DRP) (Ans- Deals with restoring normal business operations after the disaster takes place...works to get the business back to normal Maximum tolerable downtime (Ans- The maxim...