CISSP DOMAIN 1 EXAM QUESTIONS
AND ANSWERS ALL CORRECT
What do updates to the federal rule (Rule 803) mean in regards to evidence? - Answer-
Means that data or logs collected at the time, or near the time, of an attack can be
admissible, provided that:
1. Have a clear chain of custody
2. Any logs and data would need to be hashed to ensure the integrity
Best Evidence Rule - Answer-Best Evidence Rule - complete, accurate, relevant,
authentic and convincing
Secondary Evidence - Answer-Common cases involving IT as logs, documents from the
systems are considered secondary
Chain of custody - Answer-Chain of custody to prove integrity of data, no tampering
done
1. Who handled it
2. When it was handled
3. What was done with it
4. Where was it handled
Evidence Integrity - Answer-Evidence Integrity - vital that integrity cannot be questioned
1. Using hashing
2. Forensic imaging (bit level copy)
Entrapment - Answer-Entrapment is illegal and unethical, persuades an individual to
commit a crime that they had no intention to commit, such as openly advertising
sensitive data and charging when it was accessed (solid legal defense)
Enticement - Answer-legal and ethical, making a crime more enticing, however, the
offending party has already broken the law or decided to do so, such as using
honeypots (not valid defense)
Gray areas are what? - Answer-Up to the jury
Fourth Amendment protects citizens from? - Answer-Unreasonable searches and
seizures by the gov't
, -Exception, Exigent circumstances during immediate threat to human life or evidence
destruction
What should you do before using honeypots and why? - Answer-Check with legal
department before using honeypots since they pose both legal and practical risks
Copyright - Answer-Automatically granted to lasts 70 years after creator's death or 95
years after creation by/for corporations
1. Exception of first sale, original owner can sell once
2. Fair Use, allowed to use it under certain criteria
3. Software piracy and Copyright infringements are common attacks
Trademarks (Registered Trademarks) - Answer-Brand names, logos, valid for 10 years
and can be renewed indefinitely
1. If trademark lapses, anyone can use it
2. Counterfeiting is the common attack
Patents - Answer-Lasts for 20 years from the point of application, crypto algorithms can
be patented
1. Novel, useful and nonobvious
2. Patent Infringement either knowing or unknowing are common in court battles
3 Elements in CIA Triad - Answer-Confidentiality, Integrity, Availability
Threat Definition - Answer-a potential harmful incident
What principles does Availability depend on? - Answer-Integrity and Confidentiality
What principle is typically viewed as the primary goals and objectives of a security
infrastructure? - Answer-CIA
What is confidentiality? - Answer-A concept of measures used to ensure protection of
data, objects, and resources.
What is the goal of confidentiality? - Answer-Prevent or minimize unauthorized access
to data.
What is Integrity? - Answer-Concept of protecting the reliability and correctness of data
What does Integrity prevent? - Answer-Prevents unauthorized alterations of data.
What does Integrity ensure? - Answer-Ensures that data remains correct, unaltered,
and preserved.
Integrity is dependent on what? - Answer-Confidentiality
AND ANSWERS ALL CORRECT
What do updates to the federal rule (Rule 803) mean in regards to evidence? - Answer-
Means that data or logs collected at the time, or near the time, of an attack can be
admissible, provided that:
1. Have a clear chain of custody
2. Any logs and data would need to be hashed to ensure the integrity
Best Evidence Rule - Answer-Best Evidence Rule - complete, accurate, relevant,
authentic and convincing
Secondary Evidence - Answer-Common cases involving IT as logs, documents from the
systems are considered secondary
Chain of custody - Answer-Chain of custody to prove integrity of data, no tampering
done
1. Who handled it
2. When it was handled
3. What was done with it
4. Where was it handled
Evidence Integrity - Answer-Evidence Integrity - vital that integrity cannot be questioned
1. Using hashing
2. Forensic imaging (bit level copy)
Entrapment - Answer-Entrapment is illegal and unethical, persuades an individual to
commit a crime that they had no intention to commit, such as openly advertising
sensitive data and charging when it was accessed (solid legal defense)
Enticement - Answer-legal and ethical, making a crime more enticing, however, the
offending party has already broken the law or decided to do so, such as using
honeypots (not valid defense)
Gray areas are what? - Answer-Up to the jury
Fourth Amendment protects citizens from? - Answer-Unreasonable searches and
seizures by the gov't
, -Exception, Exigent circumstances during immediate threat to human life or evidence
destruction
What should you do before using honeypots and why? - Answer-Check with legal
department before using honeypots since they pose both legal and practical risks
Copyright - Answer-Automatically granted to lasts 70 years after creator's death or 95
years after creation by/for corporations
1. Exception of first sale, original owner can sell once
2. Fair Use, allowed to use it under certain criteria
3. Software piracy and Copyright infringements are common attacks
Trademarks (Registered Trademarks) - Answer-Brand names, logos, valid for 10 years
and can be renewed indefinitely
1. If trademark lapses, anyone can use it
2. Counterfeiting is the common attack
Patents - Answer-Lasts for 20 years from the point of application, crypto algorithms can
be patented
1. Novel, useful and nonobvious
2. Patent Infringement either knowing or unknowing are common in court battles
3 Elements in CIA Triad - Answer-Confidentiality, Integrity, Availability
Threat Definition - Answer-a potential harmful incident
What principles does Availability depend on? - Answer-Integrity and Confidentiality
What principle is typically viewed as the primary goals and objectives of a security
infrastructure? - Answer-CIA
What is confidentiality? - Answer-A concept of measures used to ensure protection of
data, objects, and resources.
What is the goal of confidentiality? - Answer-Prevent or minimize unauthorized access
to data.
What is Integrity? - Answer-Concept of protecting the reliability and correctness of data
What does Integrity prevent? - Answer-Prevents unauthorized alterations of data.
What does Integrity ensure? - Answer-Ensures that data remains correct, unaltered,
and preserved.
Integrity is dependent on what? - Answer-Confidentiality
