CISSP EVALUATION SETS ANSWERS AND
QUESTIONS SET A+
✔✔Patent - ✔✔Grants ownership and enables owner to legally enforce his rights to
exclude others from using the invention.
✔✔MAC - ✔✔The system applies controls based on the clearance of a user and the
classification of an object or data - the owner provide the need to know
✔✔checklist - ✔✔This type of DRP test is a detailed review of DRP documents,
performed by individuals working on their own. It is used to identify inaccuracies, errors,
and omissions in DRP documentation.
✔✔structured walkthrough - ✔✔This type of DRP test is where several business and
technology experts in the organization gather to "walk" through the BCP plan
documents.
✔✔Simulation - ✔✔This type of DRP test uses all the designated disaster recovery
personnel practice going through the motions associated with a real recovery.
✔✔Parallel - ✔✔A BCP test - Some systems are run at the alternate site
✔✔interruption (a.k.a. cutover) - ✔✔this type of DRP test is similar to a parallel test
except that in this test a function's computer systems are actually shut off or
disconnected.
✔✔Desire service - ✔✔Describe the destination for a TCP/UDP packet
✔✔Packet filtering firewall - ✔✔Are not vulnerable to DOS attacks, should be place in
the outermost boundary with an untrusted network
✔✔Parity Information - ✔✔RAID 2 - Created using hamming code, detects errors and
establishes location of the error on the drive
,✔✔Object-Oriented Database - ✔✔Reduces maintenance, ease of reusing code
✔✔Public Key Infrastructure - ✔✔ISO authentication framework, provide: Integrity,
Confidentially, Access Control, Authentication, and Nonrepudation
✔✔Offiline printing - ✔✔Other unauthorized copies of reports could be printed
✔✔0-1023 - ✔✔Well Known ports
✔✔Black Boxes - ✔✔Manipulates line voltage for toll free calls
✔✔Audit - ✔✔Ensured system accountability
✔✔Identification - ✔✔Recognition of an individual's assertion of identity, does not
ensure accountability
✔✔RADIOUS - ✔✔Central service, classified as AAA server, does not comparable with
other similar server
✔✔Authentication - Biometric - ✔✔one-to-one search to verify identity
✔✔CSMA/CD - ✔✔LAN media access method
✔✔NFS - ✔✔Use to share file between Unix computers
✔✔L2TP/PPTP - ✔✔Tunneling protocols, operate at the Data Link Layer
✔✔Encapsulating Security Payload - ✔✔Are limited due non-inclusion of IP header
information
✔✔System development and maintenance - ✔✔Can be perform by the same person in
a well-controlled environment
✔✔Computing in Galois fields - ✔✔Uses mathematical properties of modular arithmetic
to make RSA more feasible for computer use
✔✔Rijndael - ✔✔Maximum allow key size is 256
✔✔Vibration detection devices - ✔✔Are vulnerable to non-adversary disturbances
✔✔Identity Management - ✔✔Most be able to scale to support the volume of data
, ✔✔LAN attack - ✔✔Attacker sends spoofed packet SYSN flag set to the victim's IP
address
✔✔Teardrop - ✔✔Overlapping packets when the victims attempts to re-construct the
packets the machine hangs
✔✔Smurf - ✔✔Attacker sends spoofed ICMP echo traffic to a broadcast addresses
✔✔IPSec - Tunnel model - ✔✔Required when the communication is gateway-to-
gateway or host-to-host
✔✔What, how, where, when - ✔✔Proper BACKUP procedure steps
✔✔1994 U.S Communication Assistance for Law enforcement Act - ✔✔Requires all
communications carriers to make wiretaps possible
✔✔Risk Analysis - ✔✔(1) Identify assets and their values
(2) Identify vulnerabilities and threats
(3) Quantify the probability and business impact of these potential threats
(4) Provide an economic balance between the impact of threat and the cost of the
countermeasure
✔✔RAID 1 - ✔✔Mirroring, has the higher cost per megabyte
✔✔Twisted pair - ✔✔Consist of two insulated wires arranged in a spiral pattern
✔✔PPP - ✔✔Supports multiple network types in the same serial link
✔✔Dynamic packet filtering - ✔✔Create ACLs on the fly, allows dynamic ports higher
1023
✔✔SSL/TLS - ✔✔Support server (mandatory) and client (optional) authentication
✔✔VDSL - ✔✔Can delivery 52 Mbps downstream over a single cooper twisted wire
✔✔SDSL and HDSL - ✔✔Deliver 1.544 of bandwidth each way
✔✔ADSL - ✔✔Delivers a max of 9 Mpbs downstream
✔✔TCP - ✔✔IP Header Field = 6
✔✔UPD - ✔✔IP Header Field = 17
✔✔ICMP - ✔✔IP Header Field = 1
QUESTIONS SET A+
✔✔Patent - ✔✔Grants ownership and enables owner to legally enforce his rights to
exclude others from using the invention.
✔✔MAC - ✔✔The system applies controls based on the clearance of a user and the
classification of an object or data - the owner provide the need to know
✔✔checklist - ✔✔This type of DRP test is a detailed review of DRP documents,
performed by individuals working on their own. It is used to identify inaccuracies, errors,
and omissions in DRP documentation.
✔✔structured walkthrough - ✔✔This type of DRP test is where several business and
technology experts in the organization gather to "walk" through the BCP plan
documents.
✔✔Simulation - ✔✔This type of DRP test uses all the designated disaster recovery
personnel practice going through the motions associated with a real recovery.
✔✔Parallel - ✔✔A BCP test - Some systems are run at the alternate site
✔✔interruption (a.k.a. cutover) - ✔✔this type of DRP test is similar to a parallel test
except that in this test a function's computer systems are actually shut off or
disconnected.
✔✔Desire service - ✔✔Describe the destination for a TCP/UDP packet
✔✔Packet filtering firewall - ✔✔Are not vulnerable to DOS attacks, should be place in
the outermost boundary with an untrusted network
✔✔Parity Information - ✔✔RAID 2 - Created using hamming code, detects errors and
establishes location of the error on the drive
,✔✔Object-Oriented Database - ✔✔Reduces maintenance, ease of reusing code
✔✔Public Key Infrastructure - ✔✔ISO authentication framework, provide: Integrity,
Confidentially, Access Control, Authentication, and Nonrepudation
✔✔Offiline printing - ✔✔Other unauthorized copies of reports could be printed
✔✔0-1023 - ✔✔Well Known ports
✔✔Black Boxes - ✔✔Manipulates line voltage for toll free calls
✔✔Audit - ✔✔Ensured system accountability
✔✔Identification - ✔✔Recognition of an individual's assertion of identity, does not
ensure accountability
✔✔RADIOUS - ✔✔Central service, classified as AAA server, does not comparable with
other similar server
✔✔Authentication - Biometric - ✔✔one-to-one search to verify identity
✔✔CSMA/CD - ✔✔LAN media access method
✔✔NFS - ✔✔Use to share file between Unix computers
✔✔L2TP/PPTP - ✔✔Tunneling protocols, operate at the Data Link Layer
✔✔Encapsulating Security Payload - ✔✔Are limited due non-inclusion of IP header
information
✔✔System development and maintenance - ✔✔Can be perform by the same person in
a well-controlled environment
✔✔Computing in Galois fields - ✔✔Uses mathematical properties of modular arithmetic
to make RSA more feasible for computer use
✔✔Rijndael - ✔✔Maximum allow key size is 256
✔✔Vibration detection devices - ✔✔Are vulnerable to non-adversary disturbances
✔✔Identity Management - ✔✔Most be able to scale to support the volume of data
, ✔✔LAN attack - ✔✔Attacker sends spoofed packet SYSN flag set to the victim's IP
address
✔✔Teardrop - ✔✔Overlapping packets when the victims attempts to re-construct the
packets the machine hangs
✔✔Smurf - ✔✔Attacker sends spoofed ICMP echo traffic to a broadcast addresses
✔✔IPSec - Tunnel model - ✔✔Required when the communication is gateway-to-
gateway or host-to-host
✔✔What, how, where, when - ✔✔Proper BACKUP procedure steps
✔✔1994 U.S Communication Assistance for Law enforcement Act - ✔✔Requires all
communications carriers to make wiretaps possible
✔✔Risk Analysis - ✔✔(1) Identify assets and their values
(2) Identify vulnerabilities and threats
(3) Quantify the probability and business impact of these potential threats
(4) Provide an economic balance between the impact of threat and the cost of the
countermeasure
✔✔RAID 1 - ✔✔Mirroring, has the higher cost per megabyte
✔✔Twisted pair - ✔✔Consist of two insulated wires arranged in a spiral pattern
✔✔PPP - ✔✔Supports multiple network types in the same serial link
✔✔Dynamic packet filtering - ✔✔Create ACLs on the fly, allows dynamic ports higher
1023
✔✔SSL/TLS - ✔✔Support server (mandatory) and client (optional) authentication
✔✔VDSL - ✔✔Can delivery 52 Mbps downstream over a single cooper twisted wire
✔✔SDSL and HDSL - ✔✔Deliver 1.544 of bandwidth each way
✔✔ADSL - ✔✔Delivers a max of 9 Mpbs downstream
✔✔TCP - ✔✔IP Header Field = 6
✔✔UPD - ✔✔IP Header Field = 17
✔✔ICMP - ✔✔IP Header Field = 1
