CISSP STANDARD EXAMS ANSWERS AND
QUESTIONS SET A+
✔✔Excessive privileges - ✔✔Employee has more rights than necessary to complete his
tasks
✔✔Due Diligence - ✔✔Actions measured against either a policy or what a reasonable
person would do
✔✔Encryption - ✔✔A procedure that renders the contents of a message or file
unintelligible to anyone not authorized to read it.
✔✔Diverse routing - ✔✔A method of providing telecommunication continuity which
involve routing traffic through split or duplicate cable facilities
✔✔File Extension - ✔✔A tag of three or four letters, preceded by a period, which
identifies a data file's format or the application used to create the file.
✔✔File Level Deletion - ✔✔Renders the file inaccessible to the operating system,
available to reuse for data storage.
✔✔Host-to-host - ✔✔TCP/IP protocol provides for reliable end-to-end communication,
ensure error free delivery, handles data's packet sequencing, and maintains the data's
integrity
✔✔File Sharing - ✔✔One of the key benefits of a network is the ability to share files
stored on the server among several users.
✔✔Firewall - ✔✔A system designed to prevent unauthorized access to or from a private
network.
✔✔Forensic Copy - ✔✔An exact bit-by-bit copy of the entire physical hard drive or
floppy disk, including slack and unallocated space. Only forensic copy quality will hold
up in court.
,✔✔Fragmented Data - ✔✔Fragmented data is live data that has been broken up and
stored in various locations on a single hard drive or disk.
✔✔DNS - ✔✔Relies on UDP whereas services such as: FTP, Telnet and SMTP rely on
TCP
✔✔Hard Disk - ✔✔A peripheral data storage device that may be found inside a desktop
or laptop as permanent storage solution. The hard disk may also be a transportable
version and attached to a desktop or laptop.
✔✔Simulation - ✔✔Practice execution of the plan takes place, focus on specifics
scenario, continues up to the point of actual relocation of the alternative site
✔✔Honeypot - ✔✔A computer designed for the purpose of studying adversaries
✔✔Investigation - ✔✔Methodical research of an incident with the purpose of finding the
root cause
✔✔JPEG (Joint Photographic Experts Group) - ✔✔An image compression standard for
photographs
✔✔Legacy Data - ✔✔Information which has retained its importance, but which has
been created or stored by software/hardware that has been rendered obsolete.
✔✔1030 - ✔✔18 USC - Fraud and Related Activity in Connection with Computers
✔✔Mirroring - ✔✔The duplication of data for purposes of backup or to distribute network
traffic among several computers with identical data.
✔✔Continuous authentication - ✔✔A type of authentication that provides protections
against impostors who can see, alter, and insert information passed between the
claimant and verifier even after the claimant/verifier authentication is complete
✔✔Hierarchical Storage Management - ✔✔Provides continuous online backup by using
optical or tape jukeboxes
✔✔Residual Data - ✔✔Residual Data (sometimes referred to as "Ambient Data") refers
to data that is not active on a computer system.
✔✔Sampling - ✔✔Process of statistically testing a data set for the likelihood of relevant
information.
, ✔✔TIFF (Tagged Image File Format) - ✔✔One of the most widely supported file formats
for storing bit-mapped images. Files in TIFF format often end with a .tif extension.
✔✔Business Continuity Plan - ✔✔Strategy documents that provide detailed procedures
that: ensure business functions are maintained, help minimize losses of life, operations,
and systems
✔✔Reciprocal Agreement - ✔✔Two companies agreed to share their facility in the event
of a disaster, not enforceable
✔✔Algorithm - ✔✔Mathematical function that determines the cryptographic operations
✔✔Asymmetric - ✔✔Encryption system using a pair of mathematically related unequal
keys
✔✔Evidence - ✔✔It must be legally permissible, meaning it was seized legally, and the
chance of custody was not alter
✔✔Checksum - ✔✔A mathematical tool for verifying no unintentional changes have
been made
✔✔Cipher Text - ✔✔Scrambled form of the message or data
✔✔Content-Dependent - ✔✔This control is based on the actual information within the
data rather than the general definition
✔✔ALE - ✔✔ARO X SLE
✔✔HR Database - ✔✔Normally consider the authority source for user identities
because is where they are developed
✔✔Cryptanalysis - ✔✔Code breaking, practice of defeating the protective properties of
cryptography.
✔✔Social engineering - ✔✔Act of tricking or deceiving a person into giving confidential
or sensitive information
✔✔Cryptology - ✔✔The study of cryptography and cryptanalysis
✔✔Civil Law - ✔✔Wrongs against individuals or companies, resulting in damage or loss
✔✔Nondiscretionary - ✔✔The administrator define and control access to rules for files
in system
QUESTIONS SET A+
✔✔Excessive privileges - ✔✔Employee has more rights than necessary to complete his
tasks
✔✔Due Diligence - ✔✔Actions measured against either a policy or what a reasonable
person would do
✔✔Encryption - ✔✔A procedure that renders the contents of a message or file
unintelligible to anyone not authorized to read it.
✔✔Diverse routing - ✔✔A method of providing telecommunication continuity which
involve routing traffic through split or duplicate cable facilities
✔✔File Extension - ✔✔A tag of three or four letters, preceded by a period, which
identifies a data file's format or the application used to create the file.
✔✔File Level Deletion - ✔✔Renders the file inaccessible to the operating system,
available to reuse for data storage.
✔✔Host-to-host - ✔✔TCP/IP protocol provides for reliable end-to-end communication,
ensure error free delivery, handles data's packet sequencing, and maintains the data's
integrity
✔✔File Sharing - ✔✔One of the key benefits of a network is the ability to share files
stored on the server among several users.
✔✔Firewall - ✔✔A system designed to prevent unauthorized access to or from a private
network.
✔✔Forensic Copy - ✔✔An exact bit-by-bit copy of the entire physical hard drive or
floppy disk, including slack and unallocated space. Only forensic copy quality will hold
up in court.
,✔✔Fragmented Data - ✔✔Fragmented data is live data that has been broken up and
stored in various locations on a single hard drive or disk.
✔✔DNS - ✔✔Relies on UDP whereas services such as: FTP, Telnet and SMTP rely on
TCP
✔✔Hard Disk - ✔✔A peripheral data storage device that may be found inside a desktop
or laptop as permanent storage solution. The hard disk may also be a transportable
version and attached to a desktop or laptop.
✔✔Simulation - ✔✔Practice execution of the plan takes place, focus on specifics
scenario, continues up to the point of actual relocation of the alternative site
✔✔Honeypot - ✔✔A computer designed for the purpose of studying adversaries
✔✔Investigation - ✔✔Methodical research of an incident with the purpose of finding the
root cause
✔✔JPEG (Joint Photographic Experts Group) - ✔✔An image compression standard for
photographs
✔✔Legacy Data - ✔✔Information which has retained its importance, but which has
been created or stored by software/hardware that has been rendered obsolete.
✔✔1030 - ✔✔18 USC - Fraud and Related Activity in Connection with Computers
✔✔Mirroring - ✔✔The duplication of data for purposes of backup or to distribute network
traffic among several computers with identical data.
✔✔Continuous authentication - ✔✔A type of authentication that provides protections
against impostors who can see, alter, and insert information passed between the
claimant and verifier even after the claimant/verifier authentication is complete
✔✔Hierarchical Storage Management - ✔✔Provides continuous online backup by using
optical or tape jukeboxes
✔✔Residual Data - ✔✔Residual Data (sometimes referred to as "Ambient Data") refers
to data that is not active on a computer system.
✔✔Sampling - ✔✔Process of statistically testing a data set for the likelihood of relevant
information.
, ✔✔TIFF (Tagged Image File Format) - ✔✔One of the most widely supported file formats
for storing bit-mapped images. Files in TIFF format often end with a .tif extension.
✔✔Business Continuity Plan - ✔✔Strategy documents that provide detailed procedures
that: ensure business functions are maintained, help minimize losses of life, operations,
and systems
✔✔Reciprocal Agreement - ✔✔Two companies agreed to share their facility in the event
of a disaster, not enforceable
✔✔Algorithm - ✔✔Mathematical function that determines the cryptographic operations
✔✔Asymmetric - ✔✔Encryption system using a pair of mathematically related unequal
keys
✔✔Evidence - ✔✔It must be legally permissible, meaning it was seized legally, and the
chance of custody was not alter
✔✔Checksum - ✔✔A mathematical tool for verifying no unintentional changes have
been made
✔✔Cipher Text - ✔✔Scrambled form of the message or data
✔✔Content-Dependent - ✔✔This control is based on the actual information within the
data rather than the general definition
✔✔ALE - ✔✔ARO X SLE
✔✔HR Database - ✔✔Normally consider the authority source for user identities
because is where they are developed
✔✔Cryptanalysis - ✔✔Code breaking, practice of defeating the protective properties of
cryptography.
✔✔Social engineering - ✔✔Act of tricking or deceiving a person into giving confidential
or sensitive information
✔✔Cryptology - ✔✔The study of cryptography and cryptanalysis
✔✔Civil Law - ✔✔Wrongs against individuals or companies, resulting in damage or loss
✔✔Nondiscretionary - ✔✔The administrator define and control access to rules for files
in system
