Test your basic knowledge |

CISSP Certified Information Systems Security Professional

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. To create a copy of data as a precaution against the loss or damage of the original data.






2. Program instructions based upon the CPU's specific architecture






3. Process of statistically testing a data set for the likelihood of relevant information.






4. Power surge






5. An alert or alarm that is triggered when no actual attack has taken place






6. Bundles of long strands of pure glass that efficiently transmit light pulses over long distances. Interception without detection is difficult.






7. A basic level of network access control that is based upon information contained in the IP packet header.






8. The property that data meet with a priority expectation of quality and that the data can be relied upon.






9. A telephone exchange for a specific office or business.






10. An opportunity for a threat to cause loss. (terminology that encompasses many recent risk terms)






11. Malware that makes small random changes to many data points






12. A mathematical tool for verifying no unintentional changes have been made






13. An access policy determined by the owner of a file (or other resource). The owner decides who's allowed access to the file and what privileges they have - most commonly used in the PC environment (i.e. file permissions).






14. Part of a transaction control for a database which informs the database of the last recorded transaction






15. Potentially retrievable data residue that remains following intended erasure of data.






16. Natural occurrence in circuits that are in close proximity






17. The chance that something negative will occur






18. High level design or model with a goal of consistency - integrity - and balance






19. What is will remain - persistence






20. A state where two subjects can access the same object without proper mediation






21. One of the most important first steps in the planning development. Qualitative and quantitative data needs to be gathered - analyzed - interpreted and presented to management






22. Event(s) that cause harm






23. Using small special tools all tumblers of the lock are aligned - opening the door






24. Indivisible - data field must contain only one value that either all transactions take place or none do






25. Cooperative hardware and operating system notification process for prioritizing execution due to the change in state of components






26. A backup of data located where staff can gain access immediately






27. To reduce fire






28. An internal list of contact information used for the communication of incident information - designed in a distributed manor so that no one person is responsible for contacting everyone.






29. An attack involving the hijacking of a TCP session by predicting a sequence number.






30. A collection of information designed to reduce duplication and increase integrity






31. OOP concept of a class's details to be hidden from object






32. A process state - to be executing a process on the CPU






33. Periodic - automatic and transparent backup of data in bulk.






34. Implementation of measures to deter specific threats to the continuity of business operations - and/or respond to any occurrence of such threats in a timely and appropriate manner.






35. Renders the file inaccessible to the operating system - available to reuse for data storage.






36. Requires two of the three user authentication attributes (knows - is or has) - e.g. you have an ATM card and enter a PIN






37. Recovery alternative - a building only with sufficient power - and HVAC






38. The point in time to which systems and data must be recovered after an outage. (e.g. End of previous day's processing). Rpos are often used as the basis for the development of backup strategies.






39. Adversary intercepts encrypted communications - decrypts - views - encrypts - and send along to the true destination






40. The connection between a wireless and wired network.






41. Representatives from each functional area or department get together and walk through the plan from beginning to end.






42. Actions measured against either a policy or what a reasonable person would do






43. An event which stops business from continuing.






44. An availability attack - to consume resources to the point of exhaustion






45. Information which has retained its importance - but which has been created or stored by software/hardware that has been rendered obsolete.






46. An unintended communication path






47. To jump to a conclusion






48. Dedicated fast memory located on the same board as the CPU






49. An availability attack - to consume resources to the point of exhaustion from multiple vectors






50. A programming design philosophy and a type of programming language - which breaks a program into smaller units. Each unit has its own function.