CISSP Domain 1: Questions Answers

CISSP Domain 1: Questions & Answers

• Elements in CIA Triad

(Ans- Confidentiality, Integrity, Availability

Threat Definition (Ans- a potential harmful incident

What principles does Availability depend on?(Ans- Integrity and Confidentiality

What principle is typically viewed as the primary goals and objectives of a security infrastructure?(Ans- CIA

What is confidentiality?(Ans- A concept of measures used to ensure protection of data, objects, and resources.

What is the goal of confidentiality?(Ans- Prevent or minimize unauthorized access to data.

What is Integrity?(Ans- Concept of protecting the reliability and correctness of data

What does Integrity prevent?(Ans- Prevents unauthorized alterations of data.

What does Integrity ensure?(Ans- Ensures that data remains correct, unaltered, and preserved.

Integrity is dependent on what?(Ans- Confidentiality

• / 3

What are other concepts, aspects, and conditions of integrity?(Ans-

• Accuracy= Being correct
• Truthfulness = Being a true reflection of reality
• Authenticity = Being authentic and genuine.
• Validity= being factually and logically sound
• Non-repudiation = Not being able to deny having performed an action or

activity or being able to verify the origin of a communication or event

• Accountability= Being responsible or obligated for actions and results
• Responsibility = Being in charge or having control over someone or

something

• Completeness = Having all needed components or parts
• Comprehensiveness = Being complete in scope; full inclusion of all

needed elements

What is Availability (Aside from the 3rd principle of CIA Triad)?(Ans- Means that Authorized subjects are granted timely and uninterrupted time to objects.

What are some ways non-repudiation can be established?(Ans- 1.Digital Certificates

• Session Identifiers

3.Transaction Logs

• Access Controls

What are other concepts, conditions, and aspects of availability?(Ans-

• Usability= Easy to use, learn, understand, and controlled by the subject
• Accessibility= The assurance that the widest range of subjects can

interact with a resource regardless of their capabilities or limitations

• Timeliness= Being prompt on time, within a reasonable timeframe, or

providing a low latency response

• / 3

Confidentially Associations (Ans- -Data at rest (AES256) -Data in motion (SSL, TLS) -Data in use (Clean desk, no shoulder surfing etc) -Strong passwords, multifactor, need to know

Threats:

-Social Engineering -Keyloggers -Crypto attack

Defense:

-Layered Defense (Defense in Depth)

Integrity Associations (Ans- -Use crypto -Digital signatures for non-repudiation -Access Controls

-Threats:

-Alteration of data -Code injection -Attacks on crypto

Availability Associations (Ans- -SLAs -Patch Management

I-PS/IDS

-Redundancy

-Threats:

-Malicious Attacks -App Failures -Component Failures

• / 3