Deck 7: Security Architecture and Design

Question 1

Confidentially is provided if the data cannot be read.

Answer 1

True

Question 2

Integrity is provided if the data cannot be read.

Answer 2

False

Question 3

Availability describes what percentage of the time the resource or the date is available.

Answer 3

True

Question 4

A Stakeholder is an individual with interests or concerns that should be considered.

Question 5

An embedded system is a standalone piece of software.

Question 6

Boundary Control Services are responsible for placing various components in security zones.

Question 7

When a CPU gets an instruction from memory, the process is called fetching.

Question 8

Flash memory is a type RAM.

Question 9

Implied addressing addresses the entire primary memory space.

Question 10

In asymmetric multiprocessing mode, a processor is dedicated to a specific process or application.

Question 11

Which if the following is a system component that enforces access controls on an object?

A) Security Perimeter
B) Reference Monitor
C) Security Kernel
D) TCB

Question 12

Which framework is a two-dimensional model that intersects communication interrogatives (what, why, where, and so on) with various viewpoints (planner owner, designer, and such)?

A) Zachmann
B) TOGAF
C) ITIL
D) ISO/IEC 27000 Series

Question 13

Which of the following occurs when someone has access to information at one level that allows them to infer information about another level?

A) Polymorphism
B) Inference
C) Contamination
D) Escalation

Question 14

Which Bell-LaPadula rule says a subject cannot read data located at a higher security level than that possessed by the subject?

A) Simple security rule
B) *- property rule
C) Strong star property rule
D) Weak star property rule

Question 15

Which security mode allows two or more classification levels of information to be processed at the same time?

A) Dedicated
B) System High
C) Compartmented
D) Multilevel

Question 16

Which book in the Rainbow series addresses network security?

A) Red Book
B) Orange Book
C) Beige Book
D) Green Book

Question 17

C1 is an evaluation level in which rating system?

A) TSEC
B) ITSEC
C) Common Criteria
D) Red Book

Question 18

Which rating system uses a concept called a protection profile?

A) TSEC
B) ITSEC
C) Common Criteria
D) Red Book

Question 19

Which type accreditation evaluates an application or support system?

A) Type accreditation
B) System accreditation
C) Site accreditation
D) Simple accreditation

Question 20

Which of the following is sometimes called a backdoor?

A) Maintenance hook
B) Padded cell
C) SAML
D) Reference monitor