What would BEST define a covert channel?
Answer(s): C
A communication channel that allows transfer of information in a manner that violates the system's security policy.A covert channel is a way for an entity to receive information in an unauthorized manner. It is an information flow that is not controlled by a security mechanism. This type of information path wasnot developed for communication; thus, the system does not properly protect this path, because the developers never envisioned information being passed in this way.Receiving information in this manner clearly violates the system's security policy. The channel to transfer this unauthorized data is the result of one of the following conditions:· Oversight in the development of the product· Improper implementation of access controls· Existence of a shared resource between the two entities · Installation of a Trojan horseThe following answers are incorrect:An undocumented backdoor that has been left by a programmer in an operating system is incorrect because it is not a means by which unauthorized transfer of information takes place. Such backdoor is usually referred to as a Maintenance Hook.An open system port that should be closed is incorrect as it does not define a covert channel.A trojan horse is incorrect because it is a program that looks like a useful program but when you install it it would include a bonus such as a Worm, Backdoor, or some other malware without the installer knowing about it.
Shon Harris AIO v3 , Chapter-5 : Security Models & Architecture AIOv4 Security Architecture and Design (pages 343 - 344) AIOv5 Security Architecture and Design (pages 345 - 346)
Which of the following is NOT an administrative control?
Answer(s): A
It is considered to be a technical control.Logical is synonymous with Technical Control. That was the easy answer.There are three broad categories of access control: Administrative, Technical, and Physical.Each category has different access control mechanisms that can be carried out manually or automatically. All of these access control mechanisms should work in concert with each other to protect an infrastructure and its data.Each category of access control has several components that fall within it, as shown here:Administrative Controls· Policy and procedures· Personnel controls· Supervisory structure· Security-awareness training· TestingPhysical ControlsNetwork segregationPerimeter securityComputer controlsWork area separationData backupsTechnical ControlsSystem accessNetwork architectureNetwork accessEncryption and protocolsControl zoneAuditingThe following answers are incorrect :Screening of personnel is considered to be an administrative controlDevelopment of policies, standards, procedures and guidelines is considered to be an administrative controlChange control procedures is considered to be an administrative control. Reference : Shon Harris AIO v3 , Chapter - 3 : Security Management Practices , Page : 52-54
Which of the following is NOT a technical control?
It is considered to be a 'Physical Control'There are three broad categories of access control: administrative, technical, and physical. Each category has different access control mechanisms that can be carried out manually or automatically. All of these access control mechanisms should work in concert with each other to protect an infrastructure and its data.Each category of access control has several components that fall within it, a partial list is shown here. Not all controls fall into a single category, many of the controls will be in two or more categories. Below you have an example with backups where it is in all three categories:Administrative ControlsPolicy and procedures- A backup policy would be in placePersonnel controlsSupervisory structureSecurity-awareness trainingTestingPhysical ControlsNetwork segregationPerimeter securityComputer controlsWork area separationData backups (actual storage of the media, i:e Offsite Storage Facility)CablingTechnical ControlsSystem accessNetwork architectureNetwork accessEncryption and protocolsControl zoneAuditingBackup (Actual software doing the backups)The following answers are incorrect :Password and resource management is considered to be a logical or technical control.Identification and authentication methods is considered to be a logical or technical control.Intrusion Detection Systems is considered to be a logical or technical control. Reference : Shon Harris , AIO v3 , Chapter - 4 : Access Control , Page : 180 - 185
Which of the following is BEST defined as a physical control?
Answer(s): B
Physical controls are items put into place to protect facility, personnel, and resources. Examples of physical controls are security guards, locks, fencing, and lighting.The following answers are incorrect answers:Monitoring of system activity is considered to be administrative control.Identification and authentication methods are considered to be a technical control.Logical access control mechanisms is also considered to be a technical control.
Harris, Shon (2012-10-25). CISSP All-in-One Exam Guide, 6th Edition (Kindle Locations 1280- 1282). McGraw-Hill. Kindle Edition.
Which of the following is given the responsibility of the maintenance and protection of the data?
It is usually responsible for maintaining and protecting the data.The following answers are incorrect:Data owner is usually a member of management , in charge of a specific business unit and is ultimately responsible for the protection and use of the information.User is any individual who routinely uses the data for work-related tasks.Security administrator's tasks include creating new system user accounts , implementing new security software.References : Shon Harris AIO v3 , Chapter - 3: Security Management Practices , Pages : 99 - 103
Post your Comments and Discuss ISC SSCP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SSCP content, but please register or login to continue.