Question 1

Which of the following statements is true about residual risks?

Accepted Answer

The residual risk is the risk or danger of an action or an event, a method or a (technical) process that still conceives these dangers even if all theoretically possible
safety measures would be applied. The formula to calculate residual risk is (inherent risk) x (control risk) where inherent risk is (threats vulnerability). Answer B is
incorrect. In information security, security risks are considered as an indicator of threats coupled with vulnerability. In other words, security risk is a probabilistic
function of a given threat agent exercising a particular vulnerability and the impact of that risk on the organization. Security risks can be mitigated by reviewing and
taking responsible actions based on possible risks. Answer C is incorrect. Vulnerability is a weakness or lack of safeguard that can be exploited by a threat, thus
causing harm to the information systems or networks. It can exist in hardware , operating systems, firmware, applications, and configuration files. Vulnerability has
been variously defined in the current context as follows: 1.A security weakness in a Target of Evaluation due to failures in analysis, design, implementation, or
operation and such. 2.Weakness in an information system or components (e.g. system security procedures, hardware design, or internal controls that could be
exploited to produce an information-related misfortune.) 3.The existence of a weakness, design, or implementation error that can lead to an unexpected,
undesirable event compromising the security of the system, network, application, or protocol involved.

Question 2

Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution.
Choose all that apply.

Accepted Answer

The following are the common roles with regard to data in an information classification program: Owner Custodian User Security auditor The following are the
responsibilities of the owner with regard to data in an information classification program: Determining what level of classification the information requires.
Reviewing the classification assignments at regular time intervals and making changes as the business needs change. Delegating the responsibility of the data
protection duties to the custodian. The following are the responsibilities of the custodian with regard to data in an information classification program: Running
regular backups and routinely testing the validity of the backup data Performing data restoration from the backups when necessary Controlling access, adding and
removing privileges for individual users The users must comply with the requirements laid out in policies and procedures. They must also exercise due care. A
security auditor examines an organization's security procedures and mechanisms.

Question 3

Joseph works as a Software Developer for WebTech Inc. He wants to protect the algorithms and the techniques of programming that he uses in developing an
application. Which of the following laws are used to protect a part of software?

Accepted Answer

Patent laws are used to protect the duplication of software. Software patents cover the algorithms and techniques that are used in creating the software. It does
not cover the entire program of the software. Patents give the author the right to make and sell his product. The time of the patent of a product is limited though,
i.e., the author of the product has the right to use the patent for only a specific length of time. Answer D is incorrect. Copyright laws protect original works or
creations of authorship including literary, dramatic, musical, artistic, and certain other intellectual works.

Question 4

Which of the following is a signature-based intrusion detection system (IDS) ?

Accepted Answer

Snort is a signature-based intrusion detection system. Snort is an open source network intrusion prevention and detection system that operates as a network
sniffer. It logs activities of the network that is matched with the predefined signatures. Signatures can be designed for a wide range of traffic, including Internet
Protocol (IP), Transmission Control Protocol (TCP), User Datagram Protocol (UDP), and Internet Control Message Protocol (ICMP). The three main modes in
which Snort can be configured are as follows: Sniffer mode: It reads the packets of the network and displays them in a continuous stream on the console. Packet
logger mode: It logs the packets to the disk. Network intrusion detection mode: It is the most complex and configurable configuration, allowing Snort to analyze
network traffic for matches against a user-defined rule set. Answer B is incorrect. StealthWatch is a behavior-based intrusion detection system. Answer A is
incorrect. RealSecure is a network-based IDS that monitors TCP, UDP and ICMP traffic and is configured to look for attack patterns. Answer C is incorrect.

100% Valid and Newest Version CSSLP Questions & Answers shared by Certleader
/CSSLP-dumps.html (349 Q&As)
Tripwire is a file integrity checker for UNIX/Linux that can be used for host-based intrusion detection.

Question 5

In which of the following types of tests are the disaster recovery checklists distributed to the members of disaster recovery team and asked to review the assigned
checklist?

Accepted Answer

A checklist test is a test in which the disaster recovery checklists are distributed to the members of the disaster recovery team. All members are asked to review
the assigned checklist. The checklist test is a simple test and it is easy to conduct this test. It allows to accomplish the following three goals: It ensures that the
employees are aware of their responsibilities and they have the refreshed knowledge. It provides an individual with an opportunity to review the checklists for
obsolete information and update any items that require modification during the changes in the organization. It ensures that the assigned members of disaster
recovery team are still working for the organization. Answer B is incorrect. A simulation test is a method used to test the disaster recovery plans. It operates just
like a structured walk- through test. In the simulation test, the members of a disaster recovery team present with a disaster scenario and then, discuss on
appropriate responses. These suggested responses are measured and some of them are taken by the team. The range of the simulation test should be defined
carefully for avoiding excessive disruption of normal business activities. Answer A is incorrect. A parallel test includes the next level in the testing procedure, and
relocates the employees to an alternate recovery site and implements site activation procedures. These employees present with their disaster recovery
responsibilities as they would for an actual disaster. The disaster recovery sites have full responsibilities to conduct the day-to-day organization's business. Answer
C is incorrect. A full-interruption test includes the operations that shut down at the primary site and are shifted to the recovery site according to the disaster
recovery plan. It operates just like a parallel test. The full-interruption test is very expensive and difficult to arrange. Sometimes, it causes a major disruption of
operations if the test fails.

Question 6

To help review or design security controls, they can be classified by several criteria . One of these criteria is based on their nature. According to this criterion,
which of the following controls consists of incident response processes, management oversight, security awareness, and training?

Accepted Answer

Procedural controls include incident response processes, management oversight, security awareness, and training. Answer B is incorrect. Physical controls
include fences, doors, locks, and fire extinguishers. Answer D is incorrect. Technical controls include user authentication (login) and logical access controls,
antivirus software, and firewalls. Answer A is incorrect. The legal and regulatory, or compliance controls, include privacy laws, policies, and clauses.

Question 7

Which of the following is an example of over-the-air (OTA) provisioning in digital rights management?

Accepted Answer

Over- the- air provisioning is a mechanism to deploy MIDlet suites over a network. It is a method of distributing MIDlet suites. MIDlet suite providers install their
MIDlet suites on Web servers and provide a hypertext link for downloading. A user can use this link to download the MIDlet suite either through the Internet
microbrowser or through WAP on his device. Over-the-air provisioning is required for end-to-end encryption or other security purposes in order to deliver
copyrighted software to a mobile device. For example, use of shared secrets to initiate or rebuild trust. Answer D and C are incorrect. The use of device properties
for unique identification and the use of concealment to avoid tampering attacks are the security challenges in digital rights management (DRM). Answer B is
incorrect. The use of software and hardware to meet the deployment goals is a distracter.

Question 8

Which of the following types of redundancy prevents attacks in which an attacker can get physical control of a machine, insert unauthorized software, and alter
data?

Accepted Answer

Process redundancy permits software to run simultaneously on multiple geographically distributed locations, with voting on results. It prevents attacks in which an
attacker can get physical control of a machine, insert unauthorized software, and alter data.

Question 9

100% Valid and Newest Version CSSLP Questions & Answers shared by Certleader
/CSSLP-dumps.html (349 Q&As)
Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

Accepted Answer

The confidentiality service of a cryptographic system ensures that information will not be disclosed to any unauthorized person on a local network.

Question 10

You work as a project manager for BlueWell Inc. You are working on a project and the management wants a rapid and cost-effective means for establishing
priorities for planning risk responses in your project. Which risk management process can satisfy management's objective for your project?

Accepted Answer

Qualitative risk analysis is the best answer as it is a fast and low-cost approach to analyze the risk impact and its effect. It can promote certain risks onto risk
response planning. Qualitative Risk Analysis uses the likelihood and impact of the identified risks in a fast and cost-effective manner. Qualitative Risk Analysis
establishes a basis for a focused quantitative analysis or Risk Response Plan by evaluating the precedence of risks with a concern to impact on the project's
scope, cost, schedule, and quality objectives. The qualitative risk analysis is conducted at any point in a project life cycle. The primary goal of qualitative risk
analysis is to determine proportion of effect and theoretical response. The inputs to the Qualitative Risk Analysis process are: Organizational process assets
Project Scope Statement Risk Management Plan Risk Register Answer B is incorrect. Historical information can be helpful in the qualitative risk analysis, but it is
not the best answer for the question as historical information is not always available (consider new projects). Answer D is incorrect. Quantitative risk analysis is indepth and often requires a schedule and budget for the analysis. Answer C is incorrect. Rolling wave planning is not a valid answer for risk analysis processes.