What is the most secure way to dispose of information on a CD-ROM?
Answer(s): D
First you have to realize that the question is specifically talking about a CDROM. The information stored on a CDROM is not in electro magnetic format, so a degausser woud be inneffective.You cannot sanitize a CDROM but you might be able to sanitize a RW/CDROM. A CDROM is a write once device and cannot be overwritten like a hard disk or other magnetic device.Physical Damage would not be enough as information could still be extracted in a lab from the undamaged portion of the media or even from the pieces after the physical damage has been done.Physical Destruction using a shredder, your microwave oven, melting it, would be very effective and the best choice for a non magnetic media such as a CDROM.
TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
The Reference Validation Mechanism that ensures the authorized access relationships between subjects and objects is implementing which of the following concept:
Answer(s): A
The reference monitor concept is an abstract machine that ensures that all subjects have the necessary access rights before accessing objects. Therefore, the kernel will mediates all accesses to objects by subjects and will do so by validating through the reference monitor concept.The kernel does not decide whether or not the access will be granted, it will be the Reference Monitor which is a subset of the kernel that will say YES or NO.All access requests will be intercepted by the Kernel, validated through the reference monitor, and then access will either be denied or granted according to the request and the subject privileges within the system.1. The reference monitor must be small enough to be full tested and valided2. The Kernel must MEDIATE all access request from subjects to objects3. The processes implementing the reference monitor must be protected4. The reference monitor must be tamperproofThe following answers are incorrect:The security kernel is the mechanism that actually enforces the rules of the reference monitor concept.The other answers are distractors.Shon Harris, All In One, 5th Edition, Security Architecture and Design, Page 330 also seehttp://en.wikipedia.org/wiki/Reference_monitor
Which of the following describes a logical form of separation used by secure computing systems?
Answer(s): B
What security problem is most likely to exist if an operating system permits objects to be used sequentially by multiple users without forcing a refresh of the objects?
This question is asking you to consider the effects of object reuse. Object reuse is "reassigning to subject media that previously contained information. Object reuse is a security concern because if insufficient measures were taken to erase the information on the media, the information may be disclosed to unauthorized personnel."This concept relates to Security Architecture and Design, because it is in level C2: Controlled Access Protection, of the Orange Book, where "The object reuse concept must be invoked, meaning that any medium holding data must not contain any remnants of information after it is release for another subject to use."
AIO Version 5 (Shon Harris), page 360andTIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
At what stage of the applications development process should the security department become involved?
Post your Comments and Discuss ISC SSCP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SSCP content, but please register or login to continue.