Test your basic knowledge |

CISSP Security Architecture And Design

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A Policy based control. All objects and systems have a sensitivity level assigned to them






2. In access control terms - the word "dominate" refers to ___________.






3. A nonvolatile storage media etc computer hard drive - floppy disks and CD-ROMs






4. The Security Model Incorporates the ____________ that should be enforced in the system.






5. A portion of a process. When the thread is generated - it shares the same domain(resources) as its process.






6. Should always trace to individuals responsible for observing and recording the data






7. Which is a straightforward approach that provides access rights to subjects for objects?






8. The Security Kernel is the Core of The TCB and is the _____________ to building trusted computing systems.






9. The Orange book does NOT Cover ________________ - And Database management systems






10. When a portion of primary memory is accessed by specifying the actual address of the memory location






11. If an operating system permits executable objects to be used sequentially by multiple users without a refresh of the objects - what security problem is most likely to exist?






12. Happen because input data is not checked for appropriate length at time of input






13. Commonly referred to as The Big Mess Because of its lack of structure. MS-DOS is an example of a monolithic operation system






14. Which is an ISO standard product evaluation criteria that supersedes several different criteria






15. Which addresses a portion of the primary memory by specifying the actual address of the memory location?






16. The assignment of a specific individual to administer the security-related functions of a system.






17. In B2 Distinct address spaces must be provided to _________ - and a covert channel analysis is conducted. B2 adds assurance by adding requirements to the design of the system






18. The security kernel is the mechanism that _____________ of the reference monitor concept.






19. TCSEC provides a means to evaluate ______________________.






20. The Reserved hard drive space used to to extend RAM capabilites.






21. When a computer spends more time moving data from one small portion of memory to another THAN Actually processing the data






22. Individual subjects must be uniquely identified.






23. TCB contains The Security Kernel and all ______________.






24. The Red Book aka Trusted Network Interpretation (TNI) - provides _________________ for Trusted computer and communications network systems under the areas of assurance requirements






25. Bell-LaPadula - ______________: This rule is based on named subjects and objects. It specifies that specific permissions allow a subject to pass on permissions to pass on permissions at its own discretion. These permissions are stored in an access ma






26. As per FDA data should be ______________________________.






27. Documentation must be provided - including test - design - and specification document - user guides and manuals






28. In the Orange Book - functionality and assurance are NOT _____________ as they are in the ITSEC and the Common Criteria.






29. Security Labels are not required until __________; thus C2 does not require security labels but B1 does






30. What is defined as the hardware - firmware and software elements of a trusted computing base that implement the reference monitor concept?






31. The reference monitor must mediate all access - _____________ - be verifiable as correct - and must always be invoked.






32. Levels of Security and Levels of Trust Lower Letters of the alphabet represent higher levels of security. Higher numbers indicate a greater level of trust.






33. Verification Protection






34. Which would be designated as objects on a MAC system?






35. The centerpiece of the DoD Rainbow Series publications.Developed by the National Computer Security Center (NCSC)?






36. Audit data must be captured and protected to enforce accountability






37. The hardware - firmware and software elements of a trusted computing base that implement the reference monitor concept.






38. The C2 evaluation class of the _________________ offers controlled access protection.






39. The omission of networks and network components in the TCSEC was recognized and addressed in the "Trusted Network Interpretation of the TCSEC" otherwise known as ___________.






40. The Biba Model - ______________: A subject cannot request service (invoke) to subjects of higher integrity






41. Which Orange Book evaluation level is described as "Verified Design"?






42. For rhe type of environment that processes sensitive data that require a higher degree of security. It requires systems that are relatively resistant to peneration and compromise






43. Bell-LaPadula model was proposed for enforcing access control in _____________________.






44. Configuration management is also defined in the Orange Book BUT As a _____________________ and NOT an operational assurance requirement.






45. Operating System Kernel






46. Which Orange Book evaluation level is described as "Discretionary Security Protection"?






47. What is called the formal acceptance of the adequacy of a system's overall security by management?






48. THE (Technische Hogeschool Eindhoven) - VAX/VMS - Multics and Unix . THE and Multics are no longer in use






49. In the Bell-LaPadula Model the Object's Label contains ___________________.






50. The Physical memory address that the CPU uses