Official isc cissp - Study guides, Class notes & Summaries

OFFICIAL (ISC)² CISSP - DOMAIN 4: COMMUNICATION AND NETWORK SECURITY EXAM 2024 QUESTIONS WITH COMPLETE SOLUTIONS VERIFIED Address Resolution Protocol (ARP) Is used at the Media Access Control (MAC) Layer to provide for direct communication between two devices within the same LAN segment. Bit Most essential representation of data (zero or one) at Layer 1 of the Open Systems Interconnection (OSI) model. Bluetooth (Wireless Personal Area Network IEEE 802.15) Bluetooth wireless technol...

Chapter 14: Information Security Professional Certifications A certification is an official statement validating that a person has satisfied specific requirements. A. True B. False - correct answer True Which (ISC)2 certification covers seven domains of security for practitioners? A. CISM B. CCNA C. SSCP D. GSEC E. None of the above - correct answer SSCP Which (ISC)2 certification specifically addresses developing secure software? A. CISSP B. CSSLP C. GSEC ...

OFFICIAL (ISC)² CISSP - DOMAIN 6: SECURITY ASSESSMENT AND TESTING EXAM QUESTIONS WITH COMPLETE SOLUTIONS VERIFIED 2024 Attack surface Different security testing methods find different vulnerability types. Black-box testing Testing where no internal details of the system implementation are used. Condition coverage This criteria requires sufficient test cases for each condition in a program decision to take on all possible outcomes at least once. It differs from branch coverage only whe...

OFFICIAL (ISC)² CISSP - DOMAIN 1: SECURITY AND RISK MANAGEMENT QUESTIONS WITH COMPLETE SOLUTIONS VERIFIED Acceptable risk A suitable level of risk commensurate with the potential benefits of the organization's operations as determined by senior management. Audit/auditing The tools, processes, and activities used to perform compliance reviews. Availability Ensuring timely and reliable access to and use of information by authorized users. Business continuity (BC) Actions, processes, an...

OFFICIAL (ISC)² CISSP - DOMAIN 2: ASSET SECURITY QUESTIONS AND CORRECT VERIFIED ANSWERS Accountability Accountability ensures that account management has assurance that only authorized users are accessing the system and using it properly. Asset An item perceived as having value. Asset lifecycle The phases that an asset goes through from creation (collection) to destruction. Baselines A minimum level of security. Clearing The removal of sensitive data from storage devices in such a...

OFFICIAL (ISC)² CISSP - DOMAIN 3: SECURITY ARCHITECTURE AND ENGINEERING QUESTIONS WITH COMPLETE SOLUTIONS Algorithm A mathematical function that is used in the encryption and decryption processes. Asymmetric Not identical on both sides. In cryptography, key pairs are used, one to encrypt, the other to decrypt. Availability Ensuring timely and reliable access to and use of information by authorized users. Certificate authority (CA) An entity trusted by one or more users as an authori...

Fundamental Information Security Chapter 14: Information Security Professional Certifications | 100% Correct Answers | Verified | Latest 2024 Version Jonas is an experienced information security professional with a specialized focus on evaluating computers for evidence of criminal or malicious activity and recovering data. Which GIAC certification would be most appropriate for Jonas to demonstrate his abilities? GIAC Systems and Network Auditor (GSNA) GIAC Certified Forensic Examiner (...

OFFICIAL (ISC)² CISSP - DOMAIN 7: SECURITY OPERATIONS EXAM QUESTIONS WITH COMPLETE SOLUTIONS GRADED A++ Change management A formal, methodical, comprehensive process for requesting, reviewing, and approving changes to the baseline of the IT environment. Configuration management (CM) A formal, methodical, comprehensive process for establishing a baseline of the IT environment (and each of the assets within that environment). Honeypots/honeynets Machines that exist on the network, but d...