SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
Search
Test your basic knowledge |
CISSP Security Architecture And Design
Start Test
Study First
Subjects
:
certifications
,
it-skills
,
cissp
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Which in the Orange Book ratings represents the highest level of trust?
B2
Enforces the rules
Identification - Orange Book
Security Policy is clearly defined and documented
2. Requires more stringent authentication mechanisms and well-defined interfaces among layers.
First evaluation class
Overt channel
Storage and timing
B2 - Structured Protection
3. Intended for environments that require systems to handle classified data.
The National Computer Security Center (NCSC)
Labels - Orange Book
B1 - Labeled Security rating
International Standard 15408
4. The Biba Model is not concerned with security levels and confidentiality. It uses _________________.
Division C - Discretionary Protection
A lattice of Intergrity Levels
Pagefile.sys file
Covert channels
5. Ssoftware that is stored within ROM (Read-Only Memory) - (ROM is nonvolatile)
Accreditation
Identification - Orange Book
Firmware
No read down
6. The Security Kernel is the Core of The TCB and is the _____________ to building trusted computing systems.
Dominate the object's sensitivity label
Virtual storage
Most commonly used approach
Fail safe
7. Security Policies that prevent information from flowing from a higher security level to a lower security level are called ____________.
Multilevel Security Policies
Electrically Erasable and Programmable Read-Only Memory (EEPROM)
Pagefile.sys file
security protection mechanisms
8. The C2 evaluation class of the _________________ offers controlled access protection.
Multiprocessing
Totality of protection mechanisms
Trusted Network Interpretation (TNI)
Subject to Object Model
9. The security mechanisms and the system as a whole must perform predictably and acceptably in different situations continuously.
Continuous protection - O/B
Relative Addresses
Orange Book ratings
Orange Book C
10. In B2 Subjects and devices requre labels and the system must NOT allow ________. No Trapdoors exists.
Pagefile.sys file
C2
The Monolithic Operation system Architecture
Covert channels
11. A system uses the Reference Monitor to ___________________ of a subject and an object?
Attributable - original - accurate - contemporaneous and legible
Orange Book ratings
B3
Compare the security labels
12. Which is a straightforward approach that provides access rights to subjects for objects?
C2
Ring 1
Attributable data
Access Matrix model
13. Has two individual assurace ratings. C1 and C2. The Higher the number of assurance rating the greater the protection
Division C - Discretionary Protection
Firmware
Attributable data
Dominate the object's sensitivity label
14. A is a form of EPROM - but its data storage can be erased and modified electrically by onboard programming circuitry and signals.
Trusted Distribution
Its classification label (Top Secret - Secret or confidential)
Electrically Erasable and Programmable Read-Only Memory (EEPROM)
Be protected from modification
15. The Availability - Integrity and confidentiality requirements of multitasking operating systems
All Mandatory Access Control (MAC) systems
Clark-Wilson
Protection Rings Support
B3 - Rating
16. All users have a clearance for and a formal need to know about - all data processed with the system.
Dedicated Security Mode
Assigned labels
B3
No write down
17. In access control terms - the word "dominate" refers to ___________.
Trusted Products Evaluation Program (TPEP)
Higher or equal to access class
Logical addresses
Subject to Object Model
18. What is defined as the hardware - firmware and software elements of a trusted computing base that implement the reference monitor concept?
Access Matrix model
A security kernel
Execution Domain
Ring 0
19. The Simple Security rule is refered to as______________.
The Tranqulity principle (The Bell-LaPadula Model)
Security Policy - Orange Book
Protection Rings Support
The "No read Up" rule
20. The object reuse concept must also be invoked - meaning that any medium holding data must not contain any remnants of information after it is released for another subject to use. All data must be efficiently erased once the subject is doen with the m
C2 - Controlled Access Protection
Security Policy - Orange Book
Integrity
The Tranqulity principle (The Bell-LaPadula Model)
21. A domain of trust that shares a single security policy and single management
The Strong star property rule
A security domain
A Thread
Ring 1
22. When a computer spends more time moving data from one small portion of memory to another THAN Actually processing the data
Mandatory Access Control (MAC)
Multilevel Security Policies
The Trusted Computing Base (TCB)
Thrashing
23. In the Orange Book - functionality and assurance are NOT _____________ as they are in the ITSEC and the Common Criteria.
Overt channel
Evaluated separately
Reduced Instruction Set Computers (RISC)
Orange Book interpretations
24. This type of environment is highly secured environment that processes very sensitive information. It requires systems that are highly resistant to penetration.
B3 - Rating
The Monolithic Operation system Architecture
Documentation - Orange Book
Security mechanisms and evalautes their effectivenes
25. Permits a database to have two records that are identical except for Their classifications
The Thread (memory Management)
Security Policy - Orange Book
Polyinstantiation
Access control to the objects by the subjects
26. What prevents a process from accessing another process' data?
'Dominate'
B3 - Rating
Life Cycle Assurance Requirement
Process isolation
27. Using TPs (Transformation Procedures) to modify CDIs (Constrained Data) items is refered to as Well-Formed transaction
Clark-Wilson Model
The Monolithic Operation system Architecture
The reference monitor
Attributable data
28. Best defined as a mode of system termination that automatically leaves system processes and components in a secure state when a failure occurs or is detected in the system?
Its Clearance Label (Top Secret - Secret - or Confidential)
Orange Book - A1
Prohibits
Fail safe
29. The TCB is the ________________ within a computer system that work together to enforce a security policy.
Dedicated Security Mode
Totality of protection mechanisms
Sensitivity labels
Simple Security Rule
30. As per FDA data should be ______________________________.
All Mandatory Access Control (MAC) systems
Security mechanisms and evalautes their effectivenes
Attributable - original - accurate - contemporaneous and legible
Labels - Orange Book
31. Data in Cache can be accessed much more quickly than Data
Stored in Reak Memory
Simple Integrity Axiom
Attributable data
Scalar processors
32. Accreditation is also defined as an ____________________ by a designated authority that an information system is approved to operate in a particular security configuration with a prescribed set of safeguards
Administrative declaration
Life Cycle Assurance Requirement
A security kernel
C2 - Controlled Access Protection
33. An imaginary line that separates the trusted components of the TCB from those elements that are NOT trusted?
Division B - Mandatory Protection Architecture
B2 - Structured Protection
Direct Addressing
The security perimeter
34. The total(sum)combination of protection mechanisms within a computer system. The TCB includes hardware - software - and firmware.
The Trusted Computing Base (TCB)
Life Cycle Assurance Requirement
Compare the security labels
The Clark Wilson integrity model
35. Mandatory Access requires that _____________ be attached to all objects.
Pagefile.sys file
Direct addressing
Government and military applications
Sensitivity labels
36. Verification Protection
Multilevel Security Policies
Complex Instruction Set Computers (CISC)
Protection Rings Support
Orange Book A
37. Contains an Address of where the instruction and dara reside that need to be processed.
The Thread (memory Management)
Most commonly used approach
Pipelining
Security mechanisms and evalautes their effectivenes
38. The Biba Model - ______________: A Subject cannot write data to an object at a higher integrity level (No write Up)
Division D - Minimal Protection
Identification - Orange Book
*-Integrity Axiom
Integrity
39. Used by Windows systems to reserve the "Swap Space"
Clark-Wilson Model
Pagefile.sys file
Life Cycle Assurance Requirement
The National Computer Security Center (NCSC)
40. In B2 Distinct address spaces must be provided to _________ - and a covert channel analysis is conducted. B2 adds assurance by adding requirements to the design of the system
Attributable - original - accurate - contemporaneous and legible
B3 - Rating
Isolate processes
Orange Book - A1
41. In ______________ the subject must have: Need to Know for ALL the information contained within the system.
Models concerned with integrity
A1 - Rating
A Domain
Dedicated Security Mode
42. When a vendor submits a product for evaluation - it submits it to the ____________.
C2 - Controlled Access Protection
Clark-Wilson
The National Computer Security Center (NCSC)
Virtual storage
43. Certification is a Technical review that assesses the _____________ - where as Accreditation is management's Official acceptance of the information in the Certification process findings.
Pagefile.sys file
B3
Orange Book C
Security mechanisms and evalautes their effectivenes
44. Contains the ending address
Identification - Orange Book
A Limit Register (Memory Management)
Subject to Object Model
C2 - Controlled Access Protection
45. Which TCSEC level first addresses object reuse?
The Clark Wilson integrity model
The Security Kernel
C2
The Evaluated Products List (EPL) with their corresponding rating
46. The Biba model (introduced in 1977) - The Sutherland model (published in 1986) - The Brewer-Nash model (published in 1989)
Physical security
An abstract machine
Documentation - Orange Book
Models concerned with integrity
47. What access control technique is also known as multilevel security?
C2 - Controlled Access Protection
Mandatory access control
Indexed addressing
Indirect addressing
48. Discretionary access control is based on individuals and/or groups. It requires a separation of users and information and identification and authentication of individual entities
Accreditation
Its Clearance Label (Top Secret - Secret - or Confidential)
Trusted facility management
C1 - Discretionary Security Protection
49. What is called the formal acceptance of the adequacy of a system's overall security by management?
Accreditation
TCB (Trusted Computing Base)
First evaluation class
Identification - Orange Book
50. The Security Model Incorporates the ____________ that should be enforced in the system.
Be protected from modification
Security Policy
Real storage
The security perimeter