Get ISC2 CSSLP Exam Practice Questions - Real and Updated

Answer : B

Keystroke logging is used by attackers to record everything a person types, including usernames, passwords, and account information.

Keystroke logging is a method of logging and recording user keystrokes. It can be performed with software or hardware devices. Keystroke

logging devices can record everything a person types using his keyboard, such as to measure employee's productivity on certain clerical tasks.

These types of devices can also be used to get usernames, passwords, etc.

Answer D is incorrect. Wiretapping is used to eavesdrop on voice calls. Eavesdropping is the process of listening in on private

conversations. It also includes attackers listening in on network traffic.

Answer C is incorrect. Spoofing is a technique that makes a transmission appear to have come from an authentic source by forging the

IP address, email address, caller ID, etc. In IP spoofing, a hacker modifies packet headers by using someone else's IP address to hide his

identity. However, spoofing cannot be used while surfing the Internet, chatting on-line, etc. because forging the source IP address causes the

responses to be misdirected.

Answer A is incorrect. Packet sniffing is a process of monitoring data packets that travel across a network. The software used for

packet sniffing is known as sniffers. There are many packet-sniffing programs that are available on the Internet. Some of these are

unauthorized, which can be harmful for a network's security.

Answer : A, B, D

The DRM (digital rights management) technology includes the following rules:

1.Compliance rule: This rule specifies the behaviors of the DRM implementation, and applications that are accessing the implementation.

The compliance rule specifies the following elements:

Definition of specific license rights

Device requirements

Revocation of license path or penalties when the implementation is not robust enough or noncompliant

2.Robustness rule: This rule has the following features:

It specifies the various levels of robustness that are needed for asset security.

It contains assets, such as device key, content key, algorithm, and profiling data.

It specifies minimum techniques for asset security.

Answer : C, D, E, F, G

The potential security disadvantages of virtualization are as follows:

It increases configuration effort because of complexity and composite system.

It initiates the problem of how to prevent overlap while mapping VM storage onto host files.

It introduces the problem of virtualizing the TPM.

It creates the possibility that remote attestation may not work.

It initiates the problem of detecting VM covert channels.

It involves new protection mechanisms for preventing VM escape, VM detection, and VM-VM interference.

It initiates the possibility of virtual networking configuration errors.

It initiates the risk that malicious software is targeting the VM environment.

It increases overall security risk shared resources, such as networks, clipboards, clocks, printers, desktop management, and folders.

Answer A and B are incorrect. These are not the disadvantages of virtualization, as described in the NIST Information Security and

Privacy Advisory Board (ISPAB) paper 'Perspectives on Cloud Computing and Standards'.

Answer : C

NIST has developed a suite of documents for conducting Certification & Accreditation (C&A). These documents are as follows:

1.NIST Special Publication 800-37: This document is a guide for the security certification and accreditation of Federal Information

Systems.

2.NIST Special Publication 800-53: This document provides a guideline for security controls for Federal Information Systems.

3.NIST Special Publication 800-53A. This document consists of techniques and procedures for verifying the effectiveness of security

controls in Federal Information System.

4.NIST Special Publication 800-59: This document provides a guideline for identifying an information system as a National Security

System.

5.NIST Special Publication 800-60: This document is a guide for mapping types of information and information systems to security

objectives and risk levels.

Answer : A, B, C, E

The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to validate that the preceding work has produced an IS that

operates in a specified computing environment. The process activities of this phase are as follows:

Continue to review and refine the SSAA

Perform certification evaluation of the integrated system

Develop recommendation to the DAA

Certification and accreditation decision

Answer D is incorrect. System development is a Phase 2 activity.