CISSP SYBEX QUESTIONS QUESTIONS
AND ANSWERS WITH SOLUTIONS 2024
Detective Access Controls - ANSWER Security guards, supervising users, incident investigations, IDS's
Physical Access Controls - ANSWER Guards, fences, motion detectors locked doors, sealed windows,
lights, backups, cable protections, laptop locks, swipe cards,dogs, CCTV, mantraps alarms
3 Recognized Authentication Factors - ANSWER What you: Have, Know, Are
Cognitive Password - ANSWER Series of ?'s about facts or predefined responses that only the subject
should know (ex. What's your birthday...etc.)
8 Biometric Factors - ANSWER Fingerprints, face scans, iris scans, retina scans, palm topography, palm
geography, heart/pulse pattern, voice pattern, signature dynamics, keystroke patterns
Issues related to user acceptance of biometric enrollment and throughput rate - ANSWER Enrollment
times longer than two minutes are unacceptable; subjects will typically accept a throughput rate of
about six seconds or faster
What Access Control technique employs security labels - ANSWER Mandatory Access Controls
The Bell-LaPadula, Biba, and Clark-Wilson access control models were all designed to protect a single
aspect of security. Name the corresponding aspect for each model. - ANSWER Bell-LaPadula protects
confidentiality, Biba and Clark-Wilson protect integrity
3 types of subjects and their roles in a security environment - ANSWER The user access objects on a
system to perform a work task, the owner is liable for protection of data, the data custodian is assigned
to classify and protect data
Why is separation of duties and responsibilities a common security practice? - ANSWER It prevents any
single subject from being able to circumvent or disable security mechanisms
, Principle of Least Privilege - ANSWER Subjects should be granted only the amount of access to objects
that is required to accomplish their assigned work tasks.
4 Key principles upon which access control relies - ANSWER Identification, Authentication, Authorization,
Accountability (IAAA)
How are domains related to Decentralized Access Control? - ANSWER A domain is a realm of trust that
shares a common security policy. This is a form of decentralized access control
Why is monitoring an important part of a security policy? - ANSWER It's used to watch for security policy
violations and to detect unauthorized or abnormal activities
What are the functions of an IDS - ANSWER To automate the inspection of audit logs, and real time
system events, detects intrusion attempts, and watches for violations of confidentiality, integrity, and
availability
Pros and Cons of Host Based IDS - ANSWER Can: Pinpoint resources compromised by a malicious user
Can't: Detect network only attacks or on other systems, has difficulty detecting DoS attacks, and can be
detected by intruders
Pros and Cons of Network Based IDS - ANSWER Can: Montior a large network, can be hardened against
attack.
Can't: handle large data flows, doesn't work well on switched networks, can't pinpoint compromised
resources
Differences between knowledge based and behavior based detections methods used by IDS - ANSWER
Knowledge based uses a signature database and tries to match monitored events to that database.
Behavior based learns about the normal activities on your system through watching and learning
What is a honey pot and what is it used for? - ANSWER Honey pots are face networks used to lure
intruders in order to create sufficient audit trails for tracking them down and prosecuting.
AND ANSWERS WITH SOLUTIONS 2024
Detective Access Controls - ANSWER Security guards, supervising users, incident investigations, IDS's
Physical Access Controls - ANSWER Guards, fences, motion detectors locked doors, sealed windows,
lights, backups, cable protections, laptop locks, swipe cards,dogs, CCTV, mantraps alarms
3 Recognized Authentication Factors - ANSWER What you: Have, Know, Are
Cognitive Password - ANSWER Series of ?'s about facts or predefined responses that only the subject
should know (ex. What's your birthday...etc.)
8 Biometric Factors - ANSWER Fingerprints, face scans, iris scans, retina scans, palm topography, palm
geography, heart/pulse pattern, voice pattern, signature dynamics, keystroke patterns
Issues related to user acceptance of biometric enrollment and throughput rate - ANSWER Enrollment
times longer than two minutes are unacceptable; subjects will typically accept a throughput rate of
about six seconds or faster
What Access Control technique employs security labels - ANSWER Mandatory Access Controls
The Bell-LaPadula, Biba, and Clark-Wilson access control models were all designed to protect a single
aspect of security. Name the corresponding aspect for each model. - ANSWER Bell-LaPadula protects
confidentiality, Biba and Clark-Wilson protect integrity
3 types of subjects and their roles in a security environment - ANSWER The user access objects on a
system to perform a work task, the owner is liable for protection of data, the data custodian is assigned
to classify and protect data
Why is separation of duties and responsibilities a common security practice? - ANSWER It prevents any
single subject from being able to circumvent or disable security mechanisms
, Principle of Least Privilege - ANSWER Subjects should be granted only the amount of access to objects
that is required to accomplish their assigned work tasks.
4 Key principles upon which access control relies - ANSWER Identification, Authentication, Authorization,
Accountability (IAAA)
How are domains related to Decentralized Access Control? - ANSWER A domain is a realm of trust that
shares a common security policy. This is a form of decentralized access control
Why is monitoring an important part of a security policy? - ANSWER It's used to watch for security policy
violations and to detect unauthorized or abnormal activities
What are the functions of an IDS - ANSWER To automate the inspection of audit logs, and real time
system events, detects intrusion attempts, and watches for violations of confidentiality, integrity, and
availability
Pros and Cons of Host Based IDS - ANSWER Can: Pinpoint resources compromised by a malicious user
Can't: Detect network only attacks or on other systems, has difficulty detecting DoS attacks, and can be
detected by intruders
Pros and Cons of Network Based IDS - ANSWER Can: Montior a large network, can be hardened against
attack.
Can't: handle large data flows, doesn't work well on switched networks, can't pinpoint compromised
resources
Differences between knowledge based and behavior based detections methods used by IDS - ANSWER
Knowledge based uses a signature database and tries to match monitored events to that database.
Behavior based learns about the normal activities on your system through watching and learning
What is a honey pot and what is it used for? - ANSWER Honey pots are face networks used to lure
intruders in order to create sufficient audit trails for tracking them down and prosecuting.
