Sign in to save your progress, vote, and build your own decks.Sign in
CISSP
Study notes for the CISSP exam
76 cards·by grandrai
What does IAB stand for?
Internet Activities Board
What are the six access control types?
1. Preventive 2. Detective 3. Corrective 4. Recovery 5. Deterrent 6. Compensating
What is ALE
Annualized Loss Expectancy - The annual cost of a loss due to risk
How is the relationship between COBIT and ITIL best described?
The Control Objectives for Information and related Technology (CobiT) is a framework
developed by the Information Systems Audit and Control
what is the difference between a data owner and a data custodian?
A Data Owner is a senior business stakeholder who is accountable for the quality of one or more
data sets. They are usually a senior busines
What is a control gap?
A control gap is the amount of protection a security control cannot provide
How is residual risk defined?
Residual risk is calculated by determining (threats x vulnerability x asset value) x control
gap
How is residual risk calculated using total risk?
Residual risk = total risk x control gap
How is total risk defined?
total risk = (threats x vulnerabilities x asset value)
What are the 5 stages of Capability Maturity Model Integration (CMMI)
Initial, Managed, Defined, Quantitatively Managed, Optimized
What is the formula for single loss expectancy (SLE)?
SLE = Asset Value x Exposure Factor
What is the formula for Annualized Loss Expectancy (ALE)?
Annualized Loss Expectancy (ALE) = Single Loss Expectancy (SLE) x Annualized Rate of
Occurrence (ARO)
what is compartmentalization?
Compartmentalization is a method of enforcing need to know
What is formal access approval?
Formal access approval is a documented approval from the data owner for a subject to access
certain objects.
What is a data (information) owner?
A data or information owner is a manager responsible for ensuring that specific data is
protected.
What is a system owner?
A system owner is a manager responsible for the actual computers that house the data.
What is custodian?
A custodian provides hands-on protection of assets, such as data.
What are data controllers?
Data controllers are individuals who create and manage sensitive data within an
organization.
What are data processors?
Data processors manage data on behalf of data controllers..
What does PCI-DSS stand for?
Payment Card Industry - Data Security Standard
What does OCTAVE stand for?
Operationally Critical Threat, Asset and Vulnerability Evaluation
What is OCTAVE?
OCTAVE is a 3-phase risk management framework from Carnegie Mellon University
What are the three phases of OCTAVE?
Phase 1 - staff knowledge, assets, and threats. Phase 2 - vulnerabilities and safeguards.
Phase 3 - risk analysis and risk mitigation
What is the International Common Criteria?
An internationally agreed upon standard for describing and testing of information
technology (IT) products.
In Common Criteria, what does EAL stand for?
Evaluation Assurance Level
What are the four domains of COBIT?
Plan and Organize, Acquire and Implement, Deliver and Support and Monitor and Evaluate
What is International Common Criteria?
International Common Criteria is an internationally agreed upon standard for describing
and testing the security of IT products
What is Evaluation Assurance Level (EAL)?
In Common Criteria, EAL is the evaluation score of the tested product or system.
How many EAL levels does Common Criteria have?
7
question
answer
What is the Ring Model?
The Ring Model is a form of CPU hardware layering that separates and protects domains such as
kernel mode and user mode from each other.
In the Ring Model, how do processes communicate between rings?
Processes communicate through system calls which allow calls to communicate with the kernel
and provide a window between the rings.
What are the theoretical rings of the Ring Model?
Ring 0 - Kernel Mode, Ring 1 - Other OS components that do not fit Ring 0, Ring 2 - Device Drivers,
Ring 3 - User Applications
In OS construction, what is a hypervisor?
A hypervisor is mode (informally called Ring 1) that allows virtual guests to operate in Ring
O.
What is another name for the no read up (NRU) policy in Bell-la Padula?
The Simple Security Property
Which aspect of of CIA is Bell La-Padula concerned with?
Confidentiality
Which aspect of CIA is Biba concerned with?
Integrity
What is the Security property of Bell La-Padula?
Security Property in Bell La-Padula states that subjects with a higher security level cannot
WRITE DOWN to a lower level.
What are the two primary rules of the Biba?
The Simple Integrity Axiom and the Integrity Axiom.
In Biba Model, what is the Simple Integrity Axiom?
No Read Down (NRD).
in Biba, what is the Integrity Axiom?
No Read Up (NRU)
What does DEP stand for?
Data Execution Prevention
What does DEP do?
Eliminates software vulnerabilities by stopping execution of programs in memory locations
that are not predefined to contain executable data
What is ASLR?
Address Space Location Randomization
What does ASLR do?
Makes software exploitation difficult by randomizing memory address
What port do Telnet servers listen on?
Port 23
Which ports does FTP in "Active FTP" use?
Port 21 for control connection and Port 20 for data transfer.
Which ports does FTP in "Passive FTP" use?
Port 21 - Server uses same port for control and for data transfer.
What port does SSH listen on?
Port 22
What is POP?
Post Office Protocol
What is IMAP?
Internet Message Access Protocol
What port does POPv3 listen on?
Port 110
What port does IMAP listen on?
Port 143
Which ports does Domain Name System (DNS) use?
UDP Port 53 for small responses and TCP Port 53 for large responses.
What port does HTTPS use?
TCP port 443
What OSI layer does Ethernet work on?
Layer 2
How much bandwidth is a T1 channel?
1.544 Mb/s
How many T1 channel make a T3 channel?
28
How much bandwidth is a T3 channel?
44.736 Mb/s
What layer does Frame Relay work on?
Layer 2
What is DNP3?
Distibuted Network Protocol (DNP3) is an open standard used primarily in the energy sector
for interoperability
What is Fiber Channel over Ethernet (FCoE)?
FCoE is a Storage Area Network (SAN) protocol to interface with storage
What is iSCSI (Internet Small Computer Interface)?
iSCSI is SAN protocol for interfacing with storage.
What RSN (Robust Security Network)?
RSN is the same as WPA2, a full implementation of WPA2 which provides confidentiality and
integrity.
What IEEE standard is Bluetooth?
802.15
What are the three types of RFID tags?
active, semi-passive and passive
What layer do hubs and receivers work on?
Layer 1
At what layer does the Extensible Authentication Protocol (EAP) provide authentication?
Layer 2 - because it port based. Offers authentication before an IP address is issued.
At what layer does the Extensible Authentication Protocol (EAP) provide authentication?
Layer 2 - because it port based. Offers authentication before an IP address is issued.
What is LEAP?
Light Extensible Authentication Protocol - Cisco protocol with many flaws and should not be
used.
What are features of EAP-TLS?
Uses PKI requiring both client-side and server-side certificates. Very secure but also
costly and complex
What are features of EAP-TTLS?
Drops client-side certificate req of EAP-TLS. Easier to deploy but less secure.
What are the features of Protected EAP (PEAP)?
Developed by Cisco, MS and RSA and is similar and competitor to EAP-TTLS.
What layer does PPP work on?
Layer 2 where is provides CIA to synchronous links such as T1s and asynchronous links such as
modems.
Which are the two major protocols of IPSec?
Encapsulating Security Protocol (Protocol 50) and Authentication Header (Protocol 51).
What port does Virtual Network Computing (VNC) work on?
TCP port 5900