CISSP MAIN TIPS ANSWERS AND QUESTIONS SET
A+
✔✔Accreditation - ✔✔The managerial approval to operate a system based upon
knowledge of risk to operate
✔✔1029 - ✔✔18 USC - Fraud and Related Activity in Connection with Access Devices
✔✔Certification - ✔✔The technical and risk assesment of a system within the context of
the operating environment
✔✔Common Criteria - ✔✔The current internationally accepted set of standards and
processes for information security products evaluation and assurance, which joins
function and assurance requirements
✔✔Covert Channel - ✔✔An unintended communication path
✔✔Data Hiding - ✔✔A software design technique for abstraction of a process
✔✔Embedded - ✔✔Hardware or software that is part of a larger system
✔✔NIDS - ✔✔Usually inspect the header, because the data payload is encrypted in
most cases
✔✔Framework - ✔✔Third party processes used to organize the implementation of an
architecture
✔✔Internet Architecture Board - ✔✔Committee for internet design, engineering, and
management, responsible for the architectural oversight of the IETF
✔✔1024-49151 - ✔✔Registered ports as defined by IANA
,✔✔ITSEC - ✔✔The past internationally accepted set of standards and processes for
information security products evaluation and assurance, which separates function and
assurance requirements
✔✔6 - ✔✔Semiformally verified design and tested
✔✔Memory Management - ✔✔A program in the operating system responsible for
maintaining the hierarchical storage relocation requirements for processes and data
from RAM to hard drives
✔✔Race Condition - ✔✔Processes carry out their tasks on a shared resource in an
incorrect order
✔✔Multi-Processing - ✔✔To execute more than one instruction at an instant in time
✔✔Multi-Processor - ✔✔More than one processor sharing same memory, also know as
parallel systems
✔✔Multi-Programming - ✔✔Rapid switching back and forth between programs from the
computer's perspective and appearing to do more that one thing at a time from the
user's perspective
✔✔Multi-Tasking - ✔✔More than one process in the middle of executing at a time
✔✔Preemptive - ✔✔A type of multitasking that allows for more even distribution of
computing time among competing request
✔✔Primary Storage - ✔✔Memory - RAM
✔✔Process Isolation - ✔✔A form of data hiding which protects running threads of
execution from using each other's memory
✔✔Protection - ✔✔Memory management technique that allows two processes to run
concurrently without interaction
✔✔Reference Monitor - ✔✔The hardware and software mediator of all subject and
object interactions which has as its primary goal security policy enforcement.
✔✔Relocation - ✔✔Memory management technique which allows data to be moved
from one memory address to another
✔✔Ring Protection - ✔✔Implementation of operating system protection mechanism,
where more sensitive built upon the layering concept
,✔✔Trademarks - ✔✔Protect words, names, product shapes, symbols, colors, or a
combination of these, used to identify product a company
✔✔Secondary Storage - ✔✔The hard drive
✔✔Virtual Memory - ✔✔Memory management programming which make the limited
RAM of the physical machine appear to be more by using a portion of the hard drive
✔✔Wiretapping - ✔✔A passive attack that eavesdrops on communications, only legal
with prior consent or warrant
✔✔Electronic Vaulting - ✔✔Makes copies of files as they are modified and periodically
transmits them to an off-site backup site
✔✔Security Kernel - ✔✔Subset of operating systems components dedicated to
protection mechanisms
✔✔Structured Walk-through - ✔✔Representatives from each functional area or
department review the plan in its entirely
✔✔State Machine Model - ✔✔Abstract and mathematical in nature, defining all possible
states, transitions and operations
✔✔Internal use only - ✔✔Information that can be distribute within the organization but
could harm the company if disclosed externally
✔✔Synchronous token - ✔✔Generates a one-time password that is only valid for a
short period of time
✔✔User Mode - ✔✔(problem or program state) the problems solving state, the opposite
of supervisor mode
✔✔TCSEC (Orange Book) - ✔✔The past U.S. military accepted set of standards and
processes for computer systems evaluation and assurance, which combines function
and assurance requirements
✔✔Threads - ✔✔A unit of execution
✔✔TNI (Red Book) - ✔✔The past U.S. military accepted set of standards and
processes for network evaluation and assurance, which combines function and
assurance requirements
✔✔Trusted Computing Base - ✔✔All of the protection mechanism in a computer system
, ✔✔636 - ✔✔Many implementations run LDAP on SSL on this port
✔✔Activation - ✔✔To start business continuity processes
✔✔Access Control Process - ✔✔1- Defining resources
2- Determining users
3- Specifying how users use recourse
✔✔Alternate Site - ✔✔Location to perform the business function
✔✔Business Continuity Planning (BCP) - ✔✔Organization's prior arrangements made
to maintain the functions and processes important to the existence of the organization
✔✔Business Continuity Program - ✔✔An ongoing program supported and funded by
executive staff to ensure business continuity requirements are assessed, resources are
allocated and, recovery and continuity strategies and procedures are completed and
tested.
✔✔Business Continuity Steering Committee - ✔✔A committee of decision makers,
business owners, technology experts and continuity professionals, tasked with making
strategic recovery and continuity planning decisions for the organization.
✔✔Asynchronous - ✔✔Encrypt/Decrypt are processes in queues, key benefit utilization
of hardware devices and multiprocessor systems
✔✔Copyright - ✔✔Protects the expression of an idea, rather than the idea itself
✔✔Business Interruption Insurance - ✔✔Insurance coverage for disaster related
expenses that may be incurred until operations are fully recovered after a disaster.
✔✔Digital Signatures - ✔✔Message encrypted is input into the hash function then the
hash value is encrypted with the sender's private key
✔✔Business Recovery Timeline - ✔✔The chronological sequence of recovery activities,
or critical path, that must be followed to resume an acceptable level of operations
following a business interruption.
✔✔Business Unit Recovery - ✔✔The component of Disaster Recovery which deals
specifically with the relocation of a key function or department in the event of a disaster,
including personnel, essential records, communication facilities, fax, mail services, etc.
✔✔Checklist Test - ✔✔(desk check) a test that answers the questions: Does the
organization have the documentation it needs? Can it be located?
A+
✔✔Accreditation - ✔✔The managerial approval to operate a system based upon
knowledge of risk to operate
✔✔1029 - ✔✔18 USC - Fraud and Related Activity in Connection with Access Devices
✔✔Certification - ✔✔The technical and risk assesment of a system within the context of
the operating environment
✔✔Common Criteria - ✔✔The current internationally accepted set of standards and
processes for information security products evaluation and assurance, which joins
function and assurance requirements
✔✔Covert Channel - ✔✔An unintended communication path
✔✔Data Hiding - ✔✔A software design technique for abstraction of a process
✔✔Embedded - ✔✔Hardware or software that is part of a larger system
✔✔NIDS - ✔✔Usually inspect the header, because the data payload is encrypted in
most cases
✔✔Framework - ✔✔Third party processes used to organize the implementation of an
architecture
✔✔Internet Architecture Board - ✔✔Committee for internet design, engineering, and
management, responsible for the architectural oversight of the IETF
✔✔1024-49151 - ✔✔Registered ports as defined by IANA
,✔✔ITSEC - ✔✔The past internationally accepted set of standards and processes for
information security products evaluation and assurance, which separates function and
assurance requirements
✔✔6 - ✔✔Semiformally verified design and tested
✔✔Memory Management - ✔✔A program in the operating system responsible for
maintaining the hierarchical storage relocation requirements for processes and data
from RAM to hard drives
✔✔Race Condition - ✔✔Processes carry out their tasks on a shared resource in an
incorrect order
✔✔Multi-Processing - ✔✔To execute more than one instruction at an instant in time
✔✔Multi-Processor - ✔✔More than one processor sharing same memory, also know as
parallel systems
✔✔Multi-Programming - ✔✔Rapid switching back and forth between programs from the
computer's perspective and appearing to do more that one thing at a time from the
user's perspective
✔✔Multi-Tasking - ✔✔More than one process in the middle of executing at a time
✔✔Preemptive - ✔✔A type of multitasking that allows for more even distribution of
computing time among competing request
✔✔Primary Storage - ✔✔Memory - RAM
✔✔Process Isolation - ✔✔A form of data hiding which protects running threads of
execution from using each other's memory
✔✔Protection - ✔✔Memory management technique that allows two processes to run
concurrently without interaction
✔✔Reference Monitor - ✔✔The hardware and software mediator of all subject and
object interactions which has as its primary goal security policy enforcement.
✔✔Relocation - ✔✔Memory management technique which allows data to be moved
from one memory address to another
✔✔Ring Protection - ✔✔Implementation of operating system protection mechanism,
where more sensitive built upon the layering concept
,✔✔Trademarks - ✔✔Protect words, names, product shapes, symbols, colors, or a
combination of these, used to identify product a company
✔✔Secondary Storage - ✔✔The hard drive
✔✔Virtual Memory - ✔✔Memory management programming which make the limited
RAM of the physical machine appear to be more by using a portion of the hard drive
✔✔Wiretapping - ✔✔A passive attack that eavesdrops on communications, only legal
with prior consent or warrant
✔✔Electronic Vaulting - ✔✔Makes copies of files as they are modified and periodically
transmits them to an off-site backup site
✔✔Security Kernel - ✔✔Subset of operating systems components dedicated to
protection mechanisms
✔✔Structured Walk-through - ✔✔Representatives from each functional area or
department review the plan in its entirely
✔✔State Machine Model - ✔✔Abstract and mathematical in nature, defining all possible
states, transitions and operations
✔✔Internal use only - ✔✔Information that can be distribute within the organization but
could harm the company if disclosed externally
✔✔Synchronous token - ✔✔Generates a one-time password that is only valid for a
short period of time
✔✔User Mode - ✔✔(problem or program state) the problems solving state, the opposite
of supervisor mode
✔✔TCSEC (Orange Book) - ✔✔The past U.S. military accepted set of standards and
processes for computer systems evaluation and assurance, which combines function
and assurance requirements
✔✔Threads - ✔✔A unit of execution
✔✔TNI (Red Book) - ✔✔The past U.S. military accepted set of standards and
processes for network evaluation and assurance, which combines function and
assurance requirements
✔✔Trusted Computing Base - ✔✔All of the protection mechanism in a computer system
, ✔✔636 - ✔✔Many implementations run LDAP on SSL on this port
✔✔Activation - ✔✔To start business continuity processes
✔✔Access Control Process - ✔✔1- Defining resources
2- Determining users
3- Specifying how users use recourse
✔✔Alternate Site - ✔✔Location to perform the business function
✔✔Business Continuity Planning (BCP) - ✔✔Organization's prior arrangements made
to maintain the functions and processes important to the existence of the organization
✔✔Business Continuity Program - ✔✔An ongoing program supported and funded by
executive staff to ensure business continuity requirements are assessed, resources are
allocated and, recovery and continuity strategies and procedures are completed and
tested.
✔✔Business Continuity Steering Committee - ✔✔A committee of decision makers,
business owners, technology experts and continuity professionals, tasked with making
strategic recovery and continuity planning decisions for the organization.
✔✔Asynchronous - ✔✔Encrypt/Decrypt are processes in queues, key benefit utilization
of hardware devices and multiprocessor systems
✔✔Copyright - ✔✔Protects the expression of an idea, rather than the idea itself
✔✔Business Interruption Insurance - ✔✔Insurance coverage for disaster related
expenses that may be incurred until operations are fully recovered after a disaster.
✔✔Digital Signatures - ✔✔Message encrypted is input into the hash function then the
hash value is encrypted with the sender's private key
✔✔Business Recovery Timeline - ✔✔The chronological sequence of recovery activities,
or critical path, that must be followed to resume an acceptable level of operations
following a business interruption.
✔✔Business Unit Recovery - ✔✔The component of Disaster Recovery which deals
specifically with the relocation of a key function or department in the event of a disaster,
including personnel, essential records, communication facilities, fax, mail services, etc.
✔✔Checklist Test - ✔✔(desk check) a test that answers the questions: Does the
organization have the documentation it needs? Can it be located?
