Test your basic knowledge |

CISSP Certified Information Systems Security Professional

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. To assert or claim credentialing to an authentication system






2. Process of statistically testing a data set for the likelihood of relevant information.






3. Demonstrate the actual ability to recover and can verify the compatibility of backup facilities






4. Tool which mediates access






5. A cable consisting of a core - inner conductor that is surrounding by an insulator - an outer cylindrical conductor






6. A vulnerability in IP that allows an attacker to dictate the path of a communication and thereby access an internal network.






7. A world-wide wireless technology






8. Recovery alternative - short-term - high cost movable processing location






9. Unauthorized access of network devices.






10. The partial or full duplication of data from a source database to one or more destination databases.






11. To know more than one job






12. Minimal Protection - and is used for systems that were evaluated but failed to meet the criteria for higher divisions






13. One method of exercising teams in which participants are challenged to determine the actions they would take in the event of a specific disaster scenario. Mock disasters usually involve all - or most - of the applicable teams.






14. Hardware or software that is part of a larger system






15. Narrow scope examination of a system






16. An event which stops business from continuing.






17. The property that data meet with a priority expectation of quality and that the data can be relied upon.






18. Physical description on the exterior of an object that communicates the existence of a label






19. Siphoning out or leaking information by dumping computer files or stealing computer reports and tapes.






20. A Denial of Service attack that floods the target system with connection requests that are not finalized.






21. What is will remain - persistence






22. Intermediate level - pertaining to planning






23. The least formatted and therefore most portable form of text for computerized documents. ASCII files are often called plaintext files.






24. Evaluation of a system without prior knowledge by the tester






25. A database that contains the name - type - range of values - source and authorization for access for each data element






26. Interim procedures that may be used by a business unit to enable it to continue to perform its critical functions during temporary unavailability of information and/or resources






27. A test conducted on one or more components of a plan under actual operating conditions.






28. A BCP testing type - (structured walkthrough) - a test that answers the question: Is everything need for recovery available?






29. Companies should have their own team - made up of ppl from management - IT leagal - HR - and public relations - security and other key areas






30. A covert storage channel on the file attribute






31. A social engineering attack that uses spoofed email or websites to persuade people to divulge information.






32. Eavesdropping on network communications by a third party.






33. Pertaining to law - accepted by a court






34. A technology that reduces the size of a file.






35. Small data files written to a user's hard drive by a web server.






36. Mediation of covert channels must be addressed






37. Process of identifying the risks to an organization - assessing the critical functions - defining the controls in place to reduce organization exposure and evaluating the cost for such controls.






38. For PKI - to have more than one person in charge of a sensitive function






39. A running key using a random key that is never used again






40. Records or documents that - if damaged or destroyed - would cause considerable inconvenience and/or require replacement or recreation at considerable expense.






41. Highly sensitive internal documents that could seriously damage the organization if such information were lost or made public.






42. Potentially compromising leakage of electrical or acoustical signals.






43. Weak evidence






44. Individuals - normally managers or directors - who have responsibility .for the integrity - accurate reporting and use of computerized data.






45. Process of planning for and/or implementing procedures for the repair or relocation of the primary site and its contents - and for the restoration of normal operations at the primary site.






46. A backup of data located where staff can gain access readily and a localized disaster will not cause harm






47. A comprehensive set of controls comprising best practices in information security and provides guidelines on how to set up and maintain security programs.






48. The first rating that requires security labels






49. A subnetwork with storage devices servicing all servers on the attached network.






50. A Trojan horse with the express underlying purpose of controlling host from a distance