CISSP EXAMS SCRIPT ANSWERS AND QUESTIONS
SET A+
✔✔Security Domain - ✔✔An area where common processes and security control work
to separate all entities involved in these processes from other entities
✔✔Access - ✔✔A flow of information between a subject and an object
✔✔Structured Walkthrough - ✔✔One method of testing a specific component of a plan.
Typically, a team member makes a detailed presentation of the component to other
team members (and possibly non-members) for their critique and evaluation.
✔✔System Downtime - ✔✔A planned or unplanned interruption in system availability.
✔✔Restricted - ✔✔Information that utmost protection or, if discovered by unauthorized
personnel, would caused irreparable damage
✔✔Hot Site - ✔✔Fully configured with hardware, software, and environmental needs,
can be up and running quickly, expensive
✔✔Uninterruptible Power Supply (Online) - ✔✔A backup supply that provides
continuous power to critical equipment in the event that commercial power is lost.
✔✔Vital Record - ✔✔A record that must be preserved and available for retrieval if
needed.
✔✔Warm Site - ✔✔Recovery alternative which includes cold site and some equipment
and infrastructure is available
✔✔IT Contingency - ✔✔Plan for systems,networks, and major applications recovery
procedures after disruptions, should be develop for each major system and application
✔✔Spiral - ✔✔A design methodology which addresses risk early and often
,✔✔Business Continuity Plan - ✔✔Provides procedures for emergency responses,
extended backup operations, and post-disaster recovery
✔✔System Life Cycle - ✔✔Robust project management process of new systems with at
least the following phases: design and development, production, distribution, operation,
maintenance, retirement, and disposal
✔✔Object Oriented Programming (OOP) - ✔✔A programming design philosophy and a
type of programming language, which breaks a program into smaller units. Each unit
has its own function.
✔✔Compartmentalization - ✔✔The process of separating group of people and
information from other groups such as isolated from each other thus information does
not flow between them
✔✔Entrapment - ✔✔Induces an individual to commit a crime other wise he won't, it is
illegal
✔✔Dumpster diving - ✔✔Refers to going through someone's trash to find information, it
is legal, unless involves trespassing
✔✔Method - ✔✔OOP concept of an object's abilities, what it does
✔✔Encapsulation - ✔✔OOP concept of a class's details to be hidden from object
✔✔Polymorphism - ✔✔Objects or programming that looks the different but act same
✔✔Inheritance - ✔✔OOP concept of a taking attributes from the original or parent
✔✔Assembler - ✔✔Converts a high level language into machine language
✔✔Compiler - ✔✔Converts source code to an executable
✔✔Interpreter - ✔✔Line by line translation from a high level language to machine code
✔✔Machine Language (Machine Code) - ✔✔Program instructions based upon the
CPU's specific architecture
✔✔2-Phase Commit - ✔✔A distributed system's transaction control that requires
updates to complete or rollback
✔✔Black box - ✔✔Manipulates line voltage to enable toll-free calling
✔✔Data Dictionary - ✔✔A description of a database
, ✔✔Checkpoint - ✔✔Part of a transaction control for a database which informs the
database of the last recorded transaction
✔✔Trojan Horse - ✔✔A program with an inappropriate second purpose
✔✔X.25 - ✔✔Packet-switching technology that is used by telecom services for data-
only traffic, operate at L3 and L2
✔✔Federated identity - ✔✔A portable identity, and its associated entitlements, that can
be used across business boundaries, allow user to be authenticated across multiple IT
systems
✔✔Logic Bomb - ✔✔A program that waits for a condition or time to occur that executes
an inappropriate activity
✔✔Data Diddler - ✔✔Malware that makes small random changes to many data points
✔✔Remote Access Trojan - ✔✔A Trojan horse with the express underlying purpose of
controlling host from a distance
✔✔Rootkit - ✔✔Malware that subverts the detective controls of an operating system
✔✔Payload - ✔✔Final purpose or result
✔✔Botnet - ✔✔Organized group of compromised computers
✔✔Spyware - ✔✔Program that inappropriately collects private data or activity
✔✔Adware - ✔✔Unsolicited advertising software
✔✔Deadlock - ✔✔A condition in which neither party is willing to stop their activity for the
other to complete
✔✔Business Impact Analysis - ✔✔Qualitative & quantitative data is gathered, analyzed,
interpreted, and presented to management
✔✔Damage Assessment - ✔✔Responsible for determining: cause of the disaster,
potential for further damage, and identify affected areas.
✔✔Fiber Distributed Data Interface - ✔✔A token-passing ring scheme, has a second
ring that remains dormant until an error condition is detected
SET A+
✔✔Security Domain - ✔✔An area where common processes and security control work
to separate all entities involved in these processes from other entities
✔✔Access - ✔✔A flow of information between a subject and an object
✔✔Structured Walkthrough - ✔✔One method of testing a specific component of a plan.
Typically, a team member makes a detailed presentation of the component to other
team members (and possibly non-members) for their critique and evaluation.
✔✔System Downtime - ✔✔A planned or unplanned interruption in system availability.
✔✔Restricted - ✔✔Information that utmost protection or, if discovered by unauthorized
personnel, would caused irreparable damage
✔✔Hot Site - ✔✔Fully configured with hardware, software, and environmental needs,
can be up and running quickly, expensive
✔✔Uninterruptible Power Supply (Online) - ✔✔A backup supply that provides
continuous power to critical equipment in the event that commercial power is lost.
✔✔Vital Record - ✔✔A record that must be preserved and available for retrieval if
needed.
✔✔Warm Site - ✔✔Recovery alternative which includes cold site and some equipment
and infrastructure is available
✔✔IT Contingency - ✔✔Plan for systems,networks, and major applications recovery
procedures after disruptions, should be develop for each major system and application
✔✔Spiral - ✔✔A design methodology which addresses risk early and often
,✔✔Business Continuity Plan - ✔✔Provides procedures for emergency responses,
extended backup operations, and post-disaster recovery
✔✔System Life Cycle - ✔✔Robust project management process of new systems with at
least the following phases: design and development, production, distribution, operation,
maintenance, retirement, and disposal
✔✔Object Oriented Programming (OOP) - ✔✔A programming design philosophy and a
type of programming language, which breaks a program into smaller units. Each unit
has its own function.
✔✔Compartmentalization - ✔✔The process of separating group of people and
information from other groups such as isolated from each other thus information does
not flow between them
✔✔Entrapment - ✔✔Induces an individual to commit a crime other wise he won't, it is
illegal
✔✔Dumpster diving - ✔✔Refers to going through someone's trash to find information, it
is legal, unless involves trespassing
✔✔Method - ✔✔OOP concept of an object's abilities, what it does
✔✔Encapsulation - ✔✔OOP concept of a class's details to be hidden from object
✔✔Polymorphism - ✔✔Objects or programming that looks the different but act same
✔✔Inheritance - ✔✔OOP concept of a taking attributes from the original or parent
✔✔Assembler - ✔✔Converts a high level language into machine language
✔✔Compiler - ✔✔Converts source code to an executable
✔✔Interpreter - ✔✔Line by line translation from a high level language to machine code
✔✔Machine Language (Machine Code) - ✔✔Program instructions based upon the
CPU's specific architecture
✔✔2-Phase Commit - ✔✔A distributed system's transaction control that requires
updates to complete or rollback
✔✔Black box - ✔✔Manipulates line voltage to enable toll-free calling
✔✔Data Dictionary - ✔✔A description of a database
, ✔✔Checkpoint - ✔✔Part of a transaction control for a database which informs the
database of the last recorded transaction
✔✔Trojan Horse - ✔✔A program with an inappropriate second purpose
✔✔X.25 - ✔✔Packet-switching technology that is used by telecom services for data-
only traffic, operate at L3 and L2
✔✔Federated identity - ✔✔A portable identity, and its associated entitlements, that can
be used across business boundaries, allow user to be authenticated across multiple IT
systems
✔✔Logic Bomb - ✔✔A program that waits for a condition or time to occur that executes
an inappropriate activity
✔✔Data Diddler - ✔✔Malware that makes small random changes to many data points
✔✔Remote Access Trojan - ✔✔A Trojan horse with the express underlying purpose of
controlling host from a distance
✔✔Rootkit - ✔✔Malware that subverts the detective controls of an operating system
✔✔Payload - ✔✔Final purpose or result
✔✔Botnet - ✔✔Organized group of compromised computers
✔✔Spyware - ✔✔Program that inappropriately collects private data or activity
✔✔Adware - ✔✔Unsolicited advertising software
✔✔Deadlock - ✔✔A condition in which neither party is willing to stop their activity for the
other to complete
✔✔Business Impact Analysis - ✔✔Qualitative & quantitative data is gathered, analyzed,
interpreted, and presented to management
✔✔Damage Assessment - ✔✔Responsible for determining: cause of the disaster,
potential for further damage, and identify affected areas.
✔✔Fiber Distributed Data Interface - ✔✔A token-passing ring scheme, has a second
ring that remains dormant until an error condition is detected
