CSSLP-1

Which of the following is a name, symbol, or slogan with which a product is identified?

• A. Trademark

• B. Copyright

• C. Trade secret

• D. Patent

Which of the following security design principles supports comprehensive and simple design and implementation of protection mechanisms, so that an unintended access path does not exist or can be readily identified and eliminated?

• A. Least privilege

• B. Economy of mechanism

• C. Psychological acceptability

• D. Separation of duties

Which of the following are the benefits of information classification for an organization? Each correct answer represents a complete solution. Choose two.

• A. It helps reduce the Total Cost of Ownership (TCO).

• B. It helps identify which protections apply to which information.

• C. It helps identify which information is the most sensitive or vital to an organization.

• D. It ensures that modifications are not made to data by unauthorized personnel or processes

Which of the following refers to the ability to ensure that the data is not modified or tampered with?

• A. Integrity

• B. Availability

• C. Non-repudiation

• D. Confidentiality

Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

• • A. Authentication

• • B. Integrity

• • C. Non-repudiation

• • D. Confidentiality

Which of the following individuals inspects whether the security policies, standards, guidelines, and procedures are efficiently performed in accordance with the company's stated security objectives?

• • A. Information system security professional

• • B. Data owner

  • r

• • C. Senior management

• • D. Information system auditor

Which of the following security design patterns provides an alternative by requiring that a user's authentication credentials be verified by the database before providing access to that user's data?

• • A. Secure assertion

• • B. Authenticated session

• • C. Password propagation

• • D. Account lockout

Adam works as a Computer Hacking Forensic Investigator for a garment company in the United States. A project has been assigned to him to investigate a case of a disloyal employee who is suspected of stealing design of the garments, which belongs to the company and selling those garments of the same design under different brand name. Adam investigated that the company does not have any policy related to the copy of design of the garments. He also investigated that the trademark under which the employee is selling the garments is almost identical to the original trademark of the company. On the grounds of which of the following laws can the employee be prosecuted?

• • A. Espionage law

• • B. Trademark law

• • C. Cyber law

• • D. Copyright law

Which of the following is a name, symbol, or slogan with which a product is identified?

• • A. Trademark

• • B. Copyright

• • C. Trade secret

• • D. Patent

Della work as a project manager for BlueWell Inc. A threat with a dollar value of $250,000 is expected to happen in her project and the frequency of threat occurrence per year is 0.01. What will be the annualized loss expectancy in her project?

• • A. $2,000

• • B. $2,500

• • C. $3,510

• • D. $3,500