CISSP – Certified Information Systems Security Professional Bundle Set

Administrative Controls - Answer Procedures implemented to define the roles, responsibilities, policies, and administrative functions needed to manage the control environment. Annualized Rate of Occurrence (ARO) - Answer An estimate of how often a threat will be successful in exploiting a vul...

Data Remanence - Answer The remains of partial or even the entire data set of digital information Disaster Recovery Planning (DRP) - Answer Deals with restoring normal business operations after the disaster takes place...works to get the business back to normal Maximum tolerable downtime -...

CIA Triangle - Answer Cornerstone of infosec. Confidentiality, Integrity, Availability Confidentiality (CIA Triangle) - Answer prevention of unauthorized disclosure of information; prevention of unauthorized read access to data Integrity (CIA Triangle) - Answer prevention of unauthorized...

Administrative Controls - Answer Procedures implemented to define the roles, responsibilities, policies, and administrative functions needed to manage the control environment. Annualized Rate of Occurrence (ARO) - Answer An estimate of how often a threat will be successful in exploiting a vul...

D Policies are considered the first and highest level of documentation, from which the lower level elements of standards, procedures, and guidelines flow. This order, however, does not mean that policies are more important than the lower elements. These higher-level policies, which are the m...

Address Resolution Protocol (ARP) - Answer Is used at the Media Access Control (MAC) Layer to provide for direct communication between two devices within the same LAN segment. Bit - Answer Most essential representation of data (zero or one) at Layer 1 of the Open Systems Interconnection (OSI)...

The objectives of security are: - Answer provide availability, integrity, and confidentiality protection to data and resources. Vulnerability - Answer is a weakness in a system that allows a threat source to compromise its security. Threat - Answer is the possibility that someone or some...

1. What is not one of the three things that are needed to commit a computer crime? A. Means B. Skill C. Motive D. Opportunity - Answer 1. Answer: B. Although skill may be useful to those attempting to commit a computer crime, means, motive, and opportunity are required. Ready-to-use programs c...

QUESTION 151 Which of the following biometric parameters are better suited for authentication use over a long period of time? A. Iris pattern B. Voice pattern C. Signature dynamics D. Retina pattern - Answer Correct Answer: A Section: Identity and Access Management Explanation Explana...

Access Control Object - Answer A passive entity that typically receives or contains some form of data. Access Control Subject - Answer An active entity and can be any user, program, or process that requests permission to cause data to flow from an access control object to the access control s...