CISSP

OFFICIAL (ISC)² CISSP - DOMAIN 4: COMMUNICATION AND NETWORK SECURITY EXAM 2024 QUESTIONS WITH COMPLETE SOLUTIONS VERIFIED Address Resolution Protocol (ARP) Is used at the Media Access Control (MAC) Layer to provide for direct communication between two devices within the same LAN segment. Bit Most essential representation of data (zero or one) at Layer 1 of the Open Systems Interconnection (OSI) model. Bluetooth (Wireless Personal Area Network IEEE 802.15) Bluetooth wireless technol...

OFFICIAL (ISC)² CISSP - DOMAIN 7: SECURITY OPERATIONS EXAM QUESTIONS WITH COMPLETE SOLUTIONS GRADED A++ Change management A formal, methodical, comprehensive process for requesting, reviewing, and approving changes to the baseline of the IT environment. Configuration management (CM) A formal, methodical, comprehensive process for establishing a baseline of the IT environment (and each of the assets within that environment). Honeypots/honeynets Machines that exist on the network, but d...

OFFICIAL (ISC)² CISSP - DOMAIN 2: ASSET SECURITY QUESTIONS AND CORRECT VERIFIED ANSWERS Accountability Accountability ensures that account management has assurance that only authorized users are accessing the system and using it properly. Asset An item perceived as having value. Asset lifecycle The phases that an asset goes through from creation (collection) to destruction. Baselines A minimum level of security. Clearing The removal of sensitive data from storage devices in such a...

OFFICIAL (ISC)² CISSP - DOMAIN 1: SECURITY AND RISK MANAGEMENT QUESTIONS WITH COMPLETE SOLUTIONS VERIFIED Acceptable risk A suitable level of risk commensurate with the potential benefits of the organization's operations as determined by senior management. Audit/auditing The tools, processes, and activities used to perform compliance reviews. Availability Ensuring timely and reliable access to and use of information by authorized users. Business continuity (BC) Actions, processes, an...

OFFICIAL (ISC)² CISSP - DOMAIN 3: SECURITY ARCHITECTURE AND ENGINEERING QUESTIONS WITH COMPLETE SOLUTIONS Algorithm A mathematical function that is used in the encryption and decryption processes. Asymmetric Not identical on both sides. In cryptography, key pairs are used, one to encrypt, the other to decrypt. Availability Ensuring timely and reliable access to and use of information by authorized users. Certificate authority (CA) An entity trusted by one or more users as an authori...

OFFICIAL (ISC)² CISSP - DOMAIN 6: SECURITY ASSESSMENT AND TESTING EXAM QUESTIONS WITH COMPLETE SOLUTIONS VERIFIED 2024 Attack surface Different security testing methods find different vulnerability types. Black-box testing Testing where no internal details of the system implementation are used. Condition coverage This criteria requires sufficient test cases for each condition in a program decision to take on all possible outcomes at least once. It differs from branch coverage only whe...

OFFICIAL (ISC)² CISSP - DOMAIN 8: SOFTWARE DEVELOPMENT SECURITY EXAM 2024 QUESTIONS WITH CORRECT VERIFIED SOLUTIONS ALREADY PASSED ActiveX Data Objects (ADO) A Microsoft high-level interface for all kinds of data. Capability Maturity Model for Software (CMM or SW-CMM) Maturity model focused on quality management processes and has five maturity levels that contain several key practices within each maturity level. Common Object Request Broker Architecture (CORBA) A set of standards that a...

OFFICIAL (ISC)² CISSP - DOMAIN 4: COMMUNICATION AND NETWORK SECURITY EXAM 2024 QUESTIONS WITH COMPLETE SOLUTIONS VERIFIED Address Resolution Protocol (ARP) Is used at the Media Access Control (MAC) Layer to provide for direct communication between two devices within the same LAN segment. Bit Most essential representation of data (zero or one) at Layer 1 of the Open Systems Interconnection (OSI) model. Bluetooth (Wireless Personal Area Network IEEE 802.15) Bluetooth wireless technol...

OFFICIAL (ISC)² CISSP - DOMAIN 7: SECURITY OPERATIONS EXAM QUESTIONS WITH COMPLETE SOLUTIONS GRADED A++ Change management A formal, methodical, comprehensive process for requesting, reviewing, and approving changes to the baseline of the IT environment. Configuration management (CM) A formal, methodical, comprehensive process for establishing a baseline of the IT environment (and each of the assets within that environment). Honeypots/honeynets Machines that exist on the network, but d...

OFFICIAL (ISC)² CISSP - DOMAIN 2: ASSET SECURITY QUESTIONS AND CORRECT VERIFIED ANSWERS Accountability Accountability ensures that account management has assurance that only authorized users are accessing the system and using it properly. Asset An item perceived as having value. Asset lifecycle The phases that an asset goes through from creation (collection) to destruction. Baselines A minimum level of security. Clearing The removal of sensitive data from storage devices in such a...