Instant Access ISC.CSSLP.v2022-08-12.q154 Actual Practice Test Engine for Free (Page 22)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISC Certification
CSSLP Exam
ISC.CSSLP.v2022-08-12.q154 Dumps

««
«
…
17
18
19
20
21
22
23
24
25
26
…
»
»»

Question 101

DRAG DROP
Drag and drop the various SSE-CMM levels at the appropriate places.

Correct Answer:

Explanation:

The various SSE-CMM levels are described in the table below:

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 102

Which of the following NIST documents provides a guideline for identifying an information system as a National Security System?

A.NIST SP 800-37
B.NIST SP 800-59
C.NIST SP 800-53
D.NIST SP 800-60
E.NIST SP 800-53A

Correct Answer: B

Explanation/Reference:
Explanation: NIST has developed a suite of documents for conducting Certification & Accreditation (C&A).
These documents are as follows: NIST Special Publication 800-37: This document is a guide for the security certification and accreditation of Federal Information Systems. NIST Special Publication 800-53:
This document provides a guideline for security controls for Federal Information Systems. NIST Special Publication 800-53A. This document consists of techniques and procedures for verifying the effectiveness of security controls in Federal Information System. NIST Special Publication 800-59: This document is a guideline for identifying an information system as a National Security System. NIST Special Publication
800-60: This document is a guide for mapping types of information and information systems to security objectives and risk levels.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 103

Which of the following access control models are used in the commercial sector? Each correct answer represents a complete solution. Choose two.

A.Biba model
B.Clark-Biba model
C.Clark-Wilson model
D.Bell-LaPadula model

Correct Answer: A,C

The Biba and Clark-Wilson access control models are used in the commercial sector. The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject. The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system. Answer D is incorrect. The Bell-LaPadula access control model is mainly used in military systems. Answer B is incorrect. There is no such access control model as Clark-Biba.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 104

DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels. Which of the following MAC levels requires high integrity and medium availability?

A.MAC III
B.MAC IV
C.MAC I
D.MAC II

Correct Answer: D

Explanation/Reference:
Explanation: The various MAC levels are as follows: MAC I: It states that the systems have high availability and high integrity. MAC II: It states that the systems have high integrity and medium availability. MAC III: It states that the systems have basic integrity and availability.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 105

Which of the following security models dictates that subjects can only access objects through applications?

A.Biba model
B.Bell-LaPadula
C.Clark-Wilson
D.Biba-Clark model

Correct Answer: C

The Clark-Wilson security model dictates that subjects can only access objects through applications. Answer A is incorrect. The Biba model does not let subjects write to objects at a higher integrity level. Answer B is incorrect. The Bell-LaPadula model has a simple security rule, which means a subject cannot read data from a higher level. Answer D is incorrect. There is no such model as Biba-Clark model.

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
17
18
19
20
21
22
23
24
25
26
…
»
»»

[×]

Download PDF File

Enter your email address to download ISC.CSSLP.v2022-08-12.q154 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics