Test your basic knowledge |

CISSP Security Architecture And Design

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. In the Bell-LaPadula Model the Object's Label contains ___________________.






2. In which users are processing information at the same sensitivity level; thus - strict access control and auditing measures are not required. It would be a trusted envirnment with low security concerns.






3. Simpler instructions that require fewer clock cycles to execute.






4. Discretionary access control is based on individuals and/or groups. It requires a separation of users and information and identification and authentication of individual entities






5. This type of environment is highly secured environment that processes very sensitive information. It requires systems that are highly resistant to penetration.






6. What prevents a process from accessing another process' data?






7. The group that oversees the processes of evaluation within TCSEC is?






8. The Orange book requires protection against two_____________ - which are these Timing and Storage






9. Applications and user activity






10. Levels of Security and Levels of Trust Lower Letters of the alphabet represent higher levels of security. Higher numbers indicate a greater level of trust.






11. THE (Technische Hogeschool Eindhoven) - VAX/VMS - Multics and Unix . THE and Multics are no longer in use






12. In both the Bell-LaPadula and Biba Models if the word "* or Star is used - _______________.






13. The reference monitor must mediate all access - _____________ - be verifiable as correct - and must always be invoked.






14. The Bell-LaPaula Model's main goal was to ___________________ in an unauthorized manner. (Developed by the US gov)






15. Certification is a Technical review that assesses the _____________ - where as Accreditation is management's Official acceptance of the information in the Certification process findings.






16. The C2 evaluation class of the _________________ offers controlled access protection.






17. The Bell-LaPadula Model is a _______________ that enforces Confidentiality aspect of access control. Formed by David Bell and Leonard LaPadula.






18. The total combination of protection mechanisms within a computer system






19. The Biba Model is not concerned with security levels and confidentiality. It uses _________________.






20. Remaining parts of the operating system






21. When the RAM and secondary storage are combined the result is __________.






22. In the Bell-LaPadula Model the Subject's Label contains ___________________.






23. The Orange Book describes four hierarchical levels to categorize security systems. Which levels require mandatory protection?






24. Which in the Orange Book ratings represents the highest level of trust?






25. What is called the formal acceptance of the adequacy of a system's overall security by management?






26. A process that resides in a privileged domain to be able to execute its instructions and process its data with the assurance that programs in a different domain can NOT negatively affect its environment.






27. According to the Orange Book - which security level is the first to require a system to protect against covert timing channels?






28. Software - hardware and firmware must be able to be tested individually to ensure that each enforces the security policy in an effective manner throughout their lifetimes.






29. As per FDA data should be ______________________________.






30. Developed after the Bell-LaPadula model. Its a state machine model and is very similar to the Bell-LaPadula Model.






31. The Security Kernel is the Core of The TCB and is the _____________ to building trusted computing systems.






32. The TCB is the ________________ within a computer system that work together to enforce a security policy.






33. A ring protection system ________: User mode programs from direct access to peripherals and requires them to make use of services running at more privileged levels.






34. Execute one instruction at a time.






35. The Biba Model - ______________: A subject cannot request service (invoke) to subjects of higher integrity






36. For a subject to have read access to an object in a Multi-Level Security Policy - it is necessary that the subject's sensitivity label must ____________________.

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


37. The centerpiece of the DoD Rainbow Series publications.Developed by the National Computer Security Center (NCSC)?






38. If a system initializes in a secure state and all allowed state transitions are secure - the every subsequent state will be secure no matter what inputs occur.






39. Ssoftware that is stored within ROM (Read-Only Memory) - (ROM is nonvolatile)






40. What does the * (star) property mean in the Bell-LaPadula model?






41. Using TPs (Transformation Procedures) to modify CDIs (Constrained Data) items is refered to as Well-Formed transaction






42. What does the simple security (ss) property mean in the Bell-LaPadula model?






43. The first mathematical model of a multi-level security policy used to define the concept of a secure state - the modes of access - and rules for granting access?






44. Security Labels are not required until __________; thus C2 does not require security labels but B1 does






45. Includes the security kernel as well as other security-related system functions that are within the boundary of the trusted computing base. System elements that are outside of the security perimeter need not be trusted.






46. The Bell-LaPadula model Subjects and Objects are ___________.






47. The Bell-LaPadula Model is a _______________.






48. Accreditation is also defined as an ____________________ by a designated authority that an information system is approved to operate in a particular security configuration with a prescribed set of safeguards






49. In Access Control terms it means to be higher than or equal to. In the Bell-Lapadula Model - this is refered to as the dominance relation - which is the relationship of the subject's clearance to the object's classification

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


50. There is only only one class in Division D. Reserved for systems that have been evaluated but fail to meet the criteria and requirements of the higher divisions.