CISSP Domain 3

The Secure Hash Algorithm (SHA-1) creates:

• a fixed length message digest from a fixed length input message

• a variable length message digest from a variable length input message

• a fixed length message digest from a variable length input message

• a variable length message digest from a fixed length input message

A public key algorithm that does both encryption and digital signature is which of the following?

• RSA

• AES

• 3DES

• SHA

Which of the following was developed by the National Computer Security Center (NCSC) for the US Department of Defense?

• TCSEC

• ITSEC

• ICC

• ISO 27001

Which of the following statements relating to the Bell-LaPadula security model is FALSE?

• A subject is not allowed to read up.

• The property restriction can be escaped by temporarily downgrading a high level subject.

• A subject is not allowed to read down.

• It is restricted to confidentiality.

Which of the following is a class A fire?

• common combustibles

• liquid

• electrical

• Halon

Which of the following questions is less likely to help in assessing physical and environmental protection?

• Are entry codes changed periodically?

• Are appropriate fire suppression and prevention devices installed and working?data transmission lines controlled?

• Are there processes to ensure that unauthorized individuals cannot read, copy, alter, or steal printed or electronic information?

• Is physical access to data transmission lines controlled?

Which security model introduces access to objects only through programs?

• The Biba model

• The Bell-LaPadula model

• The Clark-Wilson model

• The information flow model

A model can be used to quickly summarize what permissions a subject has for various system objects.

• Access Control Matrix model

• Take-Grant model

• Bell-LaPadula model

• Biba model

Who can publish and generate digital signature

• PKI

• CA

• RA

• X.509

The primary purpose for using one-way hashing of user passwords within a password file is which of the following?

• It prevents an unauthorized person from trying multiple passwords in one logon attempt

• It prevents an unauthorized person from reading the password.

• It minimizes the amount of storage required for user passwords.

• It minimizes the amount of processing time used for encrypting passwords.