Instant Access ISC.CSSLP.v2022-08-12.q154 Actual Practice Test Engine for Free (Page 21)

Question 96

You work as an analyst for Tech Perfect Inc. You want to prevent information flow that may cause a conflict of interest in your organization representing competing clients. Which of the following security models will you use?

A.Bell-LaPadula model
B.Chinese Wall model
C.Clark-Wilson model
D.Biba model

Correct Answer: B

Explanation/Reference:
Explanation: The Chinese Wall Model is the basic security model developed by Brewer and Nash. This model prevents information flow that may cause a conflict of interest in an organization representing competing clients. The Chinese Wall Model provides both privacy and integrity for data. AnswerD is incorrect. The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject. AnswerC is incorrect. The Clark-Wilson model provides a foundation for specifying and analyzing an integrity policy for a computing system. The model is primarily concerned with formalizing the notion of information integrity. Information integrity is maintained by preventing corruption of data items in a system due to either error or malicious intent. The model's enforcement and certification rules define data items and processes that provide the basis for an integrity policy. The core of the model is based on the notion of a transaction. AnswerA is incorrect. The Bell-La Padula Model is a state machine model used for enforcing access control in government and military applications. The model is a formal state transition model of computer security policy that describes a set of access control rules which use security labels on objects and clearances for subjects. Security labels range from the most sensitive (e.g.,"Top Secret"), down to the least sensitive (e.g., "Unclassified" or "Public"). The Bell-La Padula model focuses on data confidentiality and controlled access to classified information, in contrast to the Biba Integrity Model which describes rules for the protection of data integrity.

Question 97

Which of the following methods determines the principle name of the current user and returns the jav a.security.Principal object in the HttpServletRequest interface?

A.getUserPrincipal()
B.isUserInRole()
C.getRemoteUser()
D.getCallerPrincipal()

Question 98

Fill in the blank with an appropriate phrase. is used to provide security mechanisms for the storage, processing, and transfer of data.

A.Data classification

Question 99

Gary is the project manager for his project. He and the project team have completed the qualitative risk analysis process and are about to enter the quantitative risk analysis process when Mary, the project sponsor, wants to know what quantitative risk analysis will review. Which of the following statements best defines what quantitative risk analysis will review?

A.The quantitative risk analysis process will analyze the effect of risk events that may substantially impact the project's competing demands.
B.The quantitative risk analysis reviews the results of risk identification and prepares the project for risk response management.
C.The quantitative risk analysis seeks to determine the true cost of each identified risk event and the probability of each risk event to determine the risk exposure.
D.The quantitative risk analysis process will review risk events for their probability and impact on the project objectives.

Question 100

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. In order to do so, he performs the following steps of the pre-attack phase successfully: Information gathering Determination of network range Identification of active systems Location of open ports and applications Now, which of the following tasks should he perform next?

A.Perform OS fingerprinting on the We-are-secure network.
B.Map the network of We-are-secure Inc.
C.Install a backdoor to log in remotely on the We-are-secure server.
D.Fingerprint the services running on the we-are-secure network.

Question 96

Question 97

Question 98

Question 99

Question 100

Download PDF File