CSSLP 試験練習問題

A

Correct answer: Availability Availability is a measure of how much a system, network, or application is accessible and usable when needed. It is typically measured as a percentage of uptime. Available is least related to the other answers. Availability is not part of the AAA of authentication, authorization, and accountability, which have the following definitions:Official (ISC)² Guide to the CSSLP, 2nd Edition. Pg 11-15. CSSLP Certification All-in-One Exam Guide, 3rd Edition. Pg 6-20.

C

Correct answer: Biba Biba is an integrity model designed to protect higher-level, more trustworthy data from being corrupted by lower-level data. Its no-write-up rule blocks systems from writing data to a system with a higher classification level. Its second rule states that a system reading/processing data from a lower-level system will have its integrity level lowered as a result. Bell-LaPadula is a confidentiality protection model that combines attributes of Mandatory Access Control (MAC) and Discretionary Access Control (DAC). Its Simple Security Rule prevents reading data at a higher level of classification, while its * property prevents writing data to a system with a lower classification level. The take-grant model is based on graph theory. A directed graph describes the relationships between nodes with each edge describing the take, grant, read, and write rights between nodes. Brewer-Nash or the Chinese Wall is a confidentiality model for enterprises. It addresses the case where one group within an organization may have information that cannot be shared with another.Official (ISC)² Guide to the CSSLP, 2nd Edition. Pg 717-722. CSSLP Certification All-in-One Exam Guide, 3rd Edition. Pg 40-43.

A

Correct answer: Discretionary Access Control (DAC) Several access control models exist, including:Official (ISC)² Guide to the CSSLP, 2nd Edition. Pg 113-120. CSSLP Certification All-in-One Exam Guide, 3rd Edition. Pg 38-41.

B

Correct answer: Something you do Something you do refers to behavioral factors, such as how a user interacts with a device or application. This can involve typing patterns, voice recognition, or mouse movements. Behavioral factors such as "something you do" can be used for authentication, but this is not one of the main three types of authentication factors. The three main types of authentication factors are:Official (ISC)² Guide to the CSSLP, 2nd Edition. Pg 11-12. CSSLP Certification All-in-One Exam Guide, 3rd Edition. Pg 7-8.

A

Correct answer: Bell-LaPadula Bell-LaPadula is a confidentiality protection model that combines attributes of Mandatory Access Control (MAC) and Discretionary Access Control (DAC). Its Simple Security Rule prevents reading data at a higher level of classification, while its * property prevents writing data to a system with a lower classification level. Biba is an integrity model designed to protect higher-level, more trustworthy data from being corrupted by lower-level data. Its no-write-up rule blocks systems from writing data to a system with a higher classification level. Its second rule states that a system reading/processing data from a lower-level system will have its integrity level lowered as a result. Clark-Wilson is a transaction-based integrity model that defines Constrained Data Items (CDIs) and Unconstrained Data Items (UDIs). Integrity Verification Processes (IVPs) verify that CDI meets integrity rules for a particular state, and Transformation Processes (TPs) can change CDIs from one valid state to another. Brewer-Nash or the Chinese Wall is a confidentiality model for enterprises. It addresses the case where one group within an organization may have information that cannot be shared with another.Official (ISC)² Guide to the CSSLP, 2nd Edition. Pg 717-722. CSSLP Certification All-in-One Exam Guide, 3rd Edition. Pg 40-43.