Domain. 3 - Security Engineering - Quiz 1

4. Which organization began developing the Common Criteria (CC) standard in 1990?

• IEEE

• ISC2

• ISO

• NIST

Which security model uses security labels to grant access to objects through the use of transformation procedures?

• Biba

• BellLa Padula

• Trusted Computer System

• Clark-Wilson

Ted has been working with one of the contract programmers on a web-based application and comes to you with a question: What is a thread? What do you tell him?

• A thread is a set of instructions that the computer understands and processes in a virtual machine.

• A thread is a single sequential flow of control within a program.

• A thread is a highly privileged routine that is executed within a computer system.

• A thread is a program in execution that can communi- cate only with its controlling process.

Your boss has questions about ports and protocols that must be allowed through the firewall. He is concerned about egress from inside the firewall to outside, as well as ingress from outside to inside. He also wants to know how attackers may use resources in a way not intended, or a possible attack in which a resource may be modulated to signal unauthorized information. Which of the following best describes this possible method of attack?

• Data Pipe

• Backdoor

• Tunneling

• Covert Channel

What is it called when a class of objects is assigned permissions?

• Attribute
  

• Fault tolerance

• Abstraction

• Security model

The Bell-LaPadula model was developed to protect which of the following?

• Availability

• Integrity

• Confidentiality

• Access Control

21. Dana has been studying computer system design and has a question: What is another name for a PLC?

• RAM

• Small computer typically used in automation

• Scalar processor
  

• Superscalar processor

What is not one of the four primary functions of the operating system?

• Process management

• BIOS management
  

• File Management

• I/O device management

Which of the following is the best differentiator of a NAS from a SAN?

• Disk may be attached to a private network

• May be optical
  

• Exclusive use of the servers
  

• Shared by users and servers

What performs calculations of a numeric nature and comparative logic functions?

• Arithmetic logic unit
  

• Bus interface unit
  

• Control unit
  

• Memory management unit