CISSP Practice Test

Which of the following is an attacker MOST likely to target to gain privileged access to a system?

A.

Programs that write to system resources

B.

Programs that write to user directories

C.

Log files containing sensitive information

D.

Log files containing system calls

Logical access control programs are MOST effective when they are

A.

approved by external auditors.

B.

combined with security token technology.

C.

maintained by computer security officers.

D.

made part of the operating system.

What is the MOST effective countermeasure to a malicious code attack against a mobile system?

A.

Sandbox

B.

Change control

C.

Memory management

D.

Public-Key Infrastructure (PKI)

The process of mutual authentication involves a computer system authenticating a user and authenticating the

A.

user to the audit process.

B.

computer system to the user.

C.

user's access to all authorized objects.

D.

computer system to the audit process

The Hardware Abstraction Layer (HAL) is implemented in the

A.

system software.

B.

system hardware.

C.

application software.

D.

network hardware.