Ssp Study guides, Revision notes & Summaries

Administrative Controls (Ans- Procedures implemented to define the roles, responsibilities, policies, and administrative functions needed to manage the control environment. Annualized Rate of Occurrence (ARO) (Ans- An estimate of how often a threat will be successful in exploiting a vulnerability over the period of a year. Arms Export Control Act of 1976 (Ans- Authorizes the President to designate those items that shall be considered as defense articles and defense services and control their i...

Authentication (Ans- proof and verification of information Identification (Ans- identity verification Confidentiality (Ans- Protection from unauthorized viewing Availability (Ans- Maintaining system usability Permissive (Ans- allow by default Restrictive (Ans- deny by default Defense in depth (Ans- layered defense Asset valuation (Ans- what are you trying to protect Determining users (Ans- need and level of access user entitlement Policy (Ans- documented, discrete standards and guidelin...

Data Remanence (Ans- The remains of partial or even the entire data set of digital information Disaster Recovery Planning (DRP) (Ans- Deals with restoring normal business operations after the disaster takes place...works to get the business back to normal Maximum tolerable downtime (Ans- The maximum period of time that a critical business function can be inoperative before the company incurs significant and long-lasting damage. 802.5 (Ans- IEEE standard defines the Token Ring media access met...

Aarhus Convention - correct answer Entering into effect in 2001 among EU countries, and drafted by the United Nations Economic Commission for Europe (UNECE), this agreement guarantees the rights of individuals - independently and collectively - to live in "an environment adequate to his or her health and wellbeing." This includes the "rights of access to information, public participation in decision making, and access to justice in environmental matters." ABCD Planning Method - correct...

Administrator; 87101 a.1. - Answer- Individual designated by the licensee to act on behalf of the licensee in the overall management of the facility Admission Agreement; 87101 a.2. - Answer- All documents that a resident or resident's representative must sign at the time of, or as a condition of admission Adult; 87101 a.3. - Answer- a person who is 18 years or older Advance Health Care Directive; 87101 a.5. - Answer- A written instruction that relates to the provision of health care wh...

CISSP Practice Questions Exam Cram, 4th Edition Updated Latest. 8 Chapter 1 ▶ Professional ethics ▶ Knowledge transfer: awareness, training, and education TIP Pay attention to the order of items listed in questions. Some questions might ask you about the order of activities. As an example, you would need to correctly prioritize what comes first, second, and third. Security and Risk Management 9 Quick Check Practice Questions 1. You have just won a contract for a small software de...

Which of the following are NOT operating modes of the DES encryption algorithm? A) CBC B) ECB C) CFB D) OFB E) CBE (Ans- e. DES has four modes of operations: CBC - Cipher Block Chaining. In CBC mode, each plaintext block is XORed with the previous cipher text block and then encrypted. ECB - Electronic Code Book. In ECB mode, each plaintext block is encrypted independently with the block cipher. CFB - Cipher Feedback. In CFB mode, the previous cipher text block is encrypted and the outpu...

CISSP Practice Questions Exam Cram, 4th Edition Updated Latest. CISSP Practice Questions Michael Gregg Fourth Edition 8 Chapter 1 ▶ Professional ethics ▶ Knowledge transfer: awareness, training, and education TIP Pay attention to the order of items listed in questions. Some questions might ask you about the order of activities. As an example, you would need to correctly prioritize what comes first, second, and third. Security and Risk Management 9 Quick Check Practice Question...

ISSP-SA EXAM QUESTIONS WITH 100% PASSED SOLUTIONS.