iss midterm

Risk analysis is MOST useful when applied during which phase of the system development process?

• Requirements definition

• Implementation planning

• Project identification

• System construction

Which must bear the primary responsibility for determining the level of protection needed for information systems resources?

• Senior Management

• Seniors security analysts

• System auditors

• IS security specialists

Which one of the following describes a covert timing channel?

• Provides the timing trigger to activate a malicious program disguised as a legitimate function.

• Used by a supervisor to monitor the productivity of a user without their knowledge

• Allows one process to signal information to another by modulating its own use of system resources

• Modulated to carry an unintended information signal that can only be detected by special, sensitive receivers.

Which of the following is being considered as the most reliable kind of personal identification?

• Finger print

• Ticket Granting

• Password

• Token

What is the main responsibility of the information owner?

• making the determination to decide what level of classification the information requires

• periodically checking the validity and accuracy for all data in the information system

• running regular backups

• audit the users when they require access to the information

What is called the access protection system that limits connections by calling back the number of a previously authorized location?

• Sendback forward systems

• Callback forward systems

• Sendback system

• Callback systems

What is called a type of access control where a central authority determines what subjects can have access to certain objects, based on the organizational security policy?

• Rule-based access control

• Non-discretionary Access Control

• Mandatory Access Control

• Discretionary Access Control

What control is based on a specific profile for each user?

• Lattice based access control.

• ID based access control.

• Rule based access control.

• Directory based access control

Which of the following implements the authorized access relationship between subjects and objects of a system?

• Security model

• Security kernel

• Reference kernel

• Information flow model

What represents the amount of time you hold down in a particular key?

• Dwell time

• Systems time

• Dynamic time

• Flight time