Test your basic knowledge |

CISSP Certified Information Systems Security Professional

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Unauthorized access of information (e.g. Tapping - sniffing - unsecured wireless communication - emanations)






2. More than one process in the middle of executing at a time






3. Measures followed to restore critical functions following a security incident.






4. Motive - opportunity - and means; when looking for suspects it is important to consider these 3 things






5. Highly sensitive internal documents that could seriously damage the organization if such information were lost or made public.






6. To start business continuity processes






7. System Access - Network Architecture - Network Access - Encryption and Protocols - and Auditing






8. Scrambled form of the message or data






9. A layer 2 device that used to connect two network segments and regulate traffic.






10. An unintended communication path






11. Vehicle stopping object






12. Using small special tools all tumblers of the lock are aligned - opening the door






13. Record of system activity - which provides for monitoring and detection.






14. Insurance coverage for disaster related expenses that may be incurred until operations are fully recovered after a disaster.






15. Forgery of the sender's email address in an email header.






16. Implementation of measures to deter specific threats to the continuity of business operations - and/or respond to any occurrence of such threats in a timely and appropriate manner.






17. Unsolicited advertising software






18. More than one processor sharing same memory - also know as parallel systems






19. Maximum tolerance for loss of certain business function - basis of strategy






20. Control type- that is communication based - typically written or oral






21. A choice in risk management - to implement a control that limits or lessens negative effects






22. One of the most important first steps in the planning development. Qualitative and quantitative data needs to be gathered - analyzed - interpreted and presented to management






23. A group of hard drives working as one storage unit for the purpose of speed and fault tolerance






24. A programming device use in development to circumvent controls






25. The process of categorizing attack alerts produced from an IDS in order to distinguish false positives from actual attacks






26. A structured group of teams ready to take control of the recovery operations if a disaster should occur.






27. A system designed to prevent unauthorized access to or from a private network.






28. To smooth out reductions or increases in power






29. An access policy that uses a security label system. Users have clearances - and resources have security labels that contain data classifications. MAC compares these two attributes to determine access control capabilies - most commonly used in governm






30. OOP concept of a taking attributes from the original or parent






31. Evidence must be: admissible - authentic - complete - accurate - and convincing






32. Hitting a filed down key in a lock with a hammer to open without real key






33. A planned or unplanned interruption in system availability.






34. False memory reference






35. Pertaining to law - no omissions






36. Individuals and departments responsible for the storage and safeguarding of computerized data.






37. Total number of keys available that may be selected by the user of a cryptosystem






38. Provides a physical cross connect point for devices.






39. Amount of time for restoring a business process or function to normal operations without major loss






40. Code making






41. Inference about encrypted communications






42. A procedure that renders the contents of a message or file unintelligible to anyone not authorized to read it.






43. The past U.S. military accepted set of standards and processes for computer systems evaluation and assurance - which combines function and assurance requirements






44. A back up type - where the organization has excess capacity in another location.






45. A shield against leakage of electromagnetic signals.






46. A tag of three or four letters - preceded by a period - which identifies a data file's format or the application used to create the file.






47. The restoration of computer files from backup media to restore programs and production data to the state that existed at the time of the last safe backup.






48. Subject based description of a system or a collection of resources






49. A electronic attestation of identity by a certificate authority






50. Uses two or more legal systems