Save
Upgrade to remove ads
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

CISSP & CCSP Securit

Key CISSP, CCSP and CISA domain terms. Free practice questions at https://www.ex

QuestionAnswer
CIA Triad Confidentiality, Integrity and Availability - the three core goals of every information security program, tested heavily in CISSP Domain 1.
Risk = ? Threat x Vulnerability x Asset Value (impact). Residual risk is what remains after controls are applied.
Due Care vs Due Diligence Due diligence is researching and planning the right controls; due care is actually implementing and maintaining them.
Bell-LaPadula model A confidentiality model: no read up (simple security), no write down (star property).
Biba model An integrity model: no read down, no write up - the inverse of Bell-LaPadula.
RTO vs RPO RTO is how fast a system must be restored; RPO is how much data loss is acceptable, measured backwards from the incident.
Free CISSP practice questions Practice full-length CISSP question banks with explanations at
Cloud shared responsibility model In IaaS the provider secures the hypervisor and below; the customer secures OS, apps and data. Core CCSP Domain 5 concept.
Free CCSP practice test Cloud Security Professional practice questions and domain drills:
Data dispersion (CCSP) Splitting encrypted data into fragments (bit splitting) across multiple storage nodes so no single node holds usable data.
Type 1 vs Type 2 hypervisor Type 1 runs directly on bare metal (ESXi, Hyper-V); Type 2 runs on top of a host OS and has a larger attack surface.
CISA audit evidence Evidence reliability ranks: auditor-obtained direct evidence is strongest, then external third party, then internal client records.
Free CISA and PMP practice Browse over 90 free certification practice tests, including CISA and PMP, at
Kerberos A ticket-based SSO authentication protocol using a KDC; vulnerable to golden ticket and pass-the-ticket attacks.
Defence in depth Layering independent controls so failure of one control does not expose the asset - administrative, technical and physical.
Qualitative vs quantitative risk Quantitative uses dollar figures (SLE, ARO, ALE); qualitative uses ranked scales like high/medium/low.
Created by: ExamCertPrep
Popular Computers sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards