從Google Drive中免費下載最新的Fast2test CISSP PDF版考試題庫：https://drive.google.com/open?id=10Z_2Vuc20cKoOUxn0zyV3LNbMBUego3a
你買了Fast2test的產品，我們會全力幫助你通過認證考試，而且還有免費的一年更新升級服務。如果官方改變了認證考試的大綱，我們會立即通知客戶。如果有我們的軟體有任何更新版本，都會立即推送給客戶。Fast2test是可以承諾幫你成功通過你的第一次ISC CISSP 認證考試。
| Section | Weight | Objectives |
|---|---|---|
| Security Operations | 13% | - Security operations concepts - Security administration - Physical security - Incident management and response - Business continuity and disaster recovery |
| Security Assessment and Testing | 12% | - Vulnerability assessment and remediation - Security control testing - Assessment and testing strategies - Security audit and review |
| Security Architecture and Engineering | 13% | - Security models and frameworks - Cryptography - Security design principles - Security capabilities of information systems - Site and facility security |
| Asset Security | 10% | - Protecting privacy - Asset classification and ownership - Data security controls - Asset retention and disposal |
| Software Development Security | 10% | - Secure coding practices - Software security testing - Security in software development lifecycle - Security controls in development |
| Security and Risk Management | 16% | - Legal, regulatory, and ethical issues - Security principles, concepts, and structures - Professional ethics - Governance, risk management, and compliance |
| Communication and Network Security | 13% | - Network security controls - Network architecture and design - Network attacks and countermeasures - Secure communication channels |
| Identity and Access Management (IAM) | 13% | - Access control mechanisms - Identity and access provisioning - Identity management concepts - Access control attacks and mitigation |
ISC CISSP認證考試是個機會難得的考試，它是一個在IT領域中非常有價值並且有很多IT專業人士參加的考試。通過ISC CISSP的認證考試可以提高你的IT職業技能。我們的Fast2test可以為你提供關於ISC CISSP認證考試的訓練題目，Fast2test的專業IT團隊會為你提供最新的培訓工具，幫你提早實現夢想。Fast2test有最好品質最新的ISC CISSP認證考試相關培訓資料，能幫你順利通過ISC CISSP認證考試。
問題 #1459
One important tool of computer forensics is the disk image backup. The
disk image backup is:
答案：B
解題說明：
Copying sector by sector at the bit level provides the capability to examine slack space, undeleted clusters and possibly, deleted files.
With answer a, only the system files are copied and the other information recovered in answer b would not be captured.
Answer "Copying the disk directory" does not capture the data on the disk, and answer "Copying and authenticating the system files " has the same problem as answer "Copying the system files". Actually, authenticating the system files is another step in the computer forensics process wherein a message digest is generated for all system directories and files to be able to validate the integrity of the information at a later time. This authentication should be conducted using a backup copy of the disk and not the original to avoid modifying information on the original. For review purposes, computer forensics is the collecting of information from and about computer systems that is admissible in a court of law.
問題 #1460
What is used to bind a document to its creation at a particular time?
答案：D
解題說明：
While a digital signature binds a document to the possessor of a particular key, a
digital timestamp binds a document to its creation at a particular time.
Trusted timestamping is the process of securely keeping track of the creation and modification
time of a document. Security here means that no one - not even the owner of the document -
should be able to change it once it has been recorded provided that the timestamper's integrity is
never compromised.
The administrative aspect involves setting up a publicly available, trusted timestamp management
infrastructure to collect, process and renew timestamps or to make use of a commercially
available time stamping service.
A modern example of using a Digital Timestamp is the case of an industrial research organization
that may later need to prove, for patent purposes, that they made a particular discovery on a
particular date; since magnetic media can be altered easily, this may be a nontrivial issue. One
possible solution is for a researcher to compute and record in a hardcopy laboratory notebook a
cryptographic hash of the relevant data file. In the future, should there be a need to prove the
version of this file retrieved from a backup tape has not been altered, the hash function could be
recomputed and compared with the hash value recorded in that paper notebook.
According to the RFC 3161 standard, a trusted timestamp is a timestamp issued by a trusted third
party (TTP) acting as a Time Stamping Authority (TSA). It is used to prove the existence of certain
data before a certain point (e.g. contracts, research data, medical records,...) without the
possibility that the owner can backdate the timestamps. Multiple TSAs can be used to increase
reliability and reduce vulnerability.
The newer ANSI ASC X9.95 Standard for trusted timestamps augments the RFC 3161 standard
with data-level security requirements to ensure data integrity against a reliable time source that is
provable to any third party. This standard has been applied to authenticating digitally signed data
for regulatory compliance, financial transactions, and legal evidence.
Digital TimeStamp
The following are incorrect answers:
Network Time Protocol (NTP) is used to achieve high accuracy time synchronization for computers
across a network.
A Certification Authority (CA) is the entity responsible for the issuance of digital certificates.
A Digital Signature provides integrity and authentication but does not bind a document to a specific
time it was created.
Reference used for this question:
http://en.m.wikipedia.org/wiki/File:Trusted_timestamping.gif
and
http://en.wikipedia.org/wiki/Trusted_timestamping
問題 #1461
Which LAN topology below is MOST vulnerable to a single point of
failure?
答案：C
解題說明：
Ethernet bus topology was the first commercially viable network
topology, and consists of all workstations connected to a single coaxial cable. Since the cable must be properly terminated on both ends, a break in the cable stops all communications on the bus.
* the physical star topology acts like a logical bus, but provides better fault tolerance, as a cable break only disconnects the workstation or hub directly affected.
* logical ring topology, is used by Token Ring and FDDI and is highly resilient. Token Ring employs a beacon frame, which, in case of a cable break, initiates auto reconfiguration and attempts to reroute the network around the failed mode. Also, the Token Ring active monitor station performs ring maintenance functions, like removing continuously circulating frames from the
ring. FDDI employs a second ring to provide redundancy. Sources:
Virtual LANs by Mariana Smith (McGraw-Hill, 1998) and Internetworking
Technologies Handbook, Second Edition (Cisco Press, 1998).
問題 #1462
When reviewing the security logs, the password shown for an administrative login event was ' OR ' '1'='1' --. This is an example of which of the following kinds of attack?
答案：C
問題 #1463
For competitive reasons, the customers of a large shipping company called the "Integrated International Secure Shipping Containers Corporation" (IISSCC) like to keep private the various cargos that they ship. IISSCC uses a secure database system based on the Bell-LaPadula access control model to keep this information private. Different information in this database is classified at different levels. For example, the time and date a ship departs is labeled Unclassified, so customers can estimate when their cargos will arrive, but the contents of all shipping containers on the ship are labeled Top Secret to keep different shippers from viewing each other's cargos.
An unscrupulous fruit shipper, the "Association of Private Fuit Exporters, Limited" (APFEL) wants to learn whether or not a competitor, the "Fruit Is Good Corporation" (FIGCO), is shipping pineapples on the ship "S.S. Cruise Pacific" (S.S. CP). APFEL can't simply read the top secret contents in the IISSCC database because of the access model. A smart APFEL worker, however, attempts to insert a false, unclassified record in the database that says that FIGCO is shipping pineapples on the S.S. CP, reasoning that if there is already a FIGCO-pineapple-SSCP record then the insertion attempt will fail. But the attempt does not fail, so APFEL can't be sure whether or not FIGCO is shipping pineapples on the S.S. CP.
What is the name of the access control model property that prevented APFEL from reading FIGCO's cargo information? What is a secure database technique that could explain why, when the insertion attempt succeeded, APFEL was still unsure whether or not FIGCO was shipping pineapples?
答案：D
解題說明：
The Simple Security Property states that a subject at a given clearance may not read an object at a higher classification, so unclassified APFEL could not read FIGCO's top secret cargo information.
Polyinstantiation permits a database to have two records that are identical except for their
classifications (i.e., the primary key includes the classification). Thus, APFEL's new unclassified
record did not collide with the real, top secret record, so APFEL was not able to learn about FIGs
pineapples.
The following answers are incorrect:
*-Property and Polymorphism
The *-property states that a subject at a given clearance must not write to any object at a lower
classification, which is irrelevant here because APFEL was trying to read data with a higher
classification.
Polymorphism is a term that can refer to, among other things, viruses that can change their code
to better hide from anti-virus programs or to objects of different types in an object-oriented
program that are related by a common superclass and can, therefore, respond to a common set of
methods in different ways. That's also irrelevant to this question.
Strong *-Property and Polyinstantiation
Half-right. The strong *-property limits a subject of a given clearance to writing only to objects with
a matching classification. APFEL's attempt to insert an unclassified record was consistent with this
property, but that has nothing to do with preventing APFEL from reading top secret information.
Simple Security Property and Polymorphism
Also half-right. See above for why Polymorphism is wrong.
The following reference(s) were/was used to create this question:
HARRIS, Shon, CISSP All-in-one Exam Guide, Third Edition, McGraw-Hill/Osborne, 2005
Chapter 5: Security Models and Architecture (page 280)
Chapter 11: Application and System Development (page 828)
問題 #1464
......
在哪里可以找到最新的CISSP題庫問題以方便通過考試？Fast2test已經發布了最新的ISC CISSP考題，包括考試練習題和答案，是你不二的選擇。對于購買我們CISSP題庫的考生，可以為你提供一年的免費跟新服務。如果你還在猶豫，試一下我們試用版本的PDF題目就知道效果了。最新版的ISC CISSP題庫能幫助你通過考試，獲得證書，實現夢想，它被眾多考生實踐并證明，CISSP是最好的IT認證學習資料。
CISSP最新試題: https://tw.fast2test.com/CISSP-premium-file.html
BONUS!!! 免費下載Fast2test CISSP考試題庫的完整版：https://drive.google.com/open?id=10Z_2Vuc20cKoOUxn0zyV3LNbMBUego3a