20 free sample questions1299 in the full practice test
What can be defined as: It confirms that users’ needs have been met by the supplied solution ?
Correct answer: A
A-Explanation:
Acceptance confirms that users’ needs have been met by the supplied solution.-Reference: http://www. aof.mod.uk/aofcontent/tactical/randa/content/randaintroduction.htm
Which of the following steps is NOT one of the eight detailed steps of a Business Impact Assessment (BIA):
Correct answer: B
B-Explanation:
The eight detailed and granular steps of the BIA are: 1. Select Individuals to interview for the data gathering. 2. Create data gathering techniques (surveys, questionnaires, qualitative and quantitative approaches). 3. Identify the company's critical business functions. 4. Identify the resources that these functions depend upon. 5. Calculate how long these functions can survive without these resources. 6. Identify vulnerabilities and the threats to these functions. 7. Calculate risk for each of the different business functions. 8. Document findings and report them to management.
An access system that grants users only those rights necessary for them to perform their work is operating on which security principle?
Correct answer: D
D-Explanation:
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
What kind of encryption is realized in the S/MIME-standard?
Correct answer: C
C-Explanation:
S/MIME (for Secure MIME, or Secure Multipurpose Mail Extension) is a security process used for e-mail exchanges that makes it possible to guarantee the confidentiality and non-repudiation of electronic messages.-Reference:http://en. kioskea.net/contents/139-cryptography-s-mime
The Information Technology Security Evaluation Criteria (ITSEC) was written to address which of the following that the Orange Book did not address?
Correct answer: B
B-Explanation:
TCSEC focused on confidentiality while ITSEC added integrity and availability as security goals.
What attribute is included in a X.509-certificate?
Correct answer: C
C-Explanation:
RFC 2459 : Internet X.509 Public Key Infrastructure Certificate and CRL Profile; GUTMANN, P., X.509 style guide; SMITH, Richard E., Internet Cryptography, 1997, Addison-Wesley Pub Co.
In a hierarchical PKI, the highest CA is regularly called Root CA, it is also referred to by which one of the following terms?
Correct answer: C
C-Reference: Arsenault, Turner, Internet X.509 Public Key Infrastructure: Roadmap, Chapter "Terminology".
A confidential number used as an authentication factor to verify a user's identity is called a:
Correct answer: B
B-Explanation:
PIN Stands for Personal Identification Number, as the name states it is a combination of numbers.
Which of the following answers is described as a random value used in cryptographic algorithms to ensure that patterns are not created during the encryption process?
Correct answer: C
C-Explanation:
The basic power in cryptography is randomness. This uncertainty is why encrypted data is unusable to someone without the key to decrypt.
What is the name of the first mathematical model of a multi-level security policy used to define the concept of a secure state, the modes of access, and rules for granting access?
Correct answer: A
A-Explanation:
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
Register free to unlock 10 more sample questions
Own this practice test forever.
Any 2 exams per month.
Any 4 exams per month.
Any 12 exams over 3 months.
