Free Access to ISC.CSSLP.v2023-02-09.q213 with Valid Practice Test (Page 25)

Question 116

Which of the following actions does the Data Loss Prevention (DLP) technology take when an agent detects a policy violation for data of all states? Each correct answer represents a complete solution.
Choose all that apply.

A.It creates an alert.
B.It quarantines the file to a secure location.
C.It reconstructs the session.
D.It blocks the transmission of content.

Question 117

Continuous Monitoring is the fourth phase of the security certification and accreditation process. What activities are performed in the Continuous Monitoring process? Each correct answer represents a complete solution. Choose all that apply.

A.Security accreditation decision
B.Security control monitoring and impact analyses of changes to the information system
C.Security accreditation documentation
D.Configuration management and control
E.Status reporting and documentation

Question 118

What are the differences between managed and unmanaged code technologies? Each correct answer represents a complete solution. Choose two.

A.Managed code is referred to as Hex code, whereas unmanaged code is referred to as byte code.
B.C and C++ are the examples of managed code, whereas Java EE and Microsoft.NET are the examples of unmanaged code.
C.Managed code executes under management of a runtime environment, whereas unmanaged code is executed by the CPU of a computer system.
D.Managed code is compiled into an intermediate code format, whereas unmanaged code is compiled into machine code.

Question 119

The mission and business process level is the Tier 2. What are the various Tier 2 activities? Each correct answer represents a complete solution. Choose all that apply.

A.Developing an organization-wide information protection strategy and incorporating high-level information security requirements
B.Defining the types of information that the organization needs, to successfully execute the stated missions and business processes
C.Specifying the degree of autonomy for the subordinate organizations
D.Defining the core missions and business processes for the organization
E.Prioritizing missions and business processes with respect to the goals and objectives of the organization

Question 120

Which of the following is a malicious exploit of a website, whereby unauthorized commands are transmitted from a user trusted by the website?

A.Cross-Site Scripting
B.Injection flaw
C.Side channel attack
D.Cross-Site Request Forgery

Correct Answer: D

Explanation/Reference:
Explanation:
CSRF (Cross-Site Request Forgery) is a malicious exploit of a website, whereby unauthorized commands are transmitted from a user trusted by the website. It is also known as a one-click attack or session riding.
CSRF occurs when a user is tricked by an attacker into activating a request in order to perform some unauthorized action. It increases data loss and malicious code execution. AnswerA is incorrect. Cross- site scripting (XSS) is a type of computer security vulnerability typically found in web applications which enable malicious attackers to inject client-side script into web pages viewed by other users. An exploited cross-site scripting vulnerability can be used by attackers to bypass access controls, such as the same origin policy. Cross-site scripting carried out on websites were roughly 80% of all security vulnerabilities documented by Symantec as of 2007. Their impact may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site, and the nature of any security mitigations implemented by the site owner. Answer: C is incorrect. A side channel attack is based on information gained from the physical implementation of a cryptosystem, rather than brute force or theoretical weaknesses in the algorithms (compare cryptanalysis). For example, timing information, power consumption, electromagnetic leaks or even sound can provide an extra source of information which can be exploited to break the system. Many side- channel attacks require considerable technical knowledge of the internal operation of the system on which the cryptography is implemented. Answer: B is incorrect.
Injection flaws are the vulnerabilities where a foreign agent illegally uses a sub-system. They are the vulnerability holes that can be used to attack a database of Web applications. It is the most common technique of attacking a database. Injection occurs when user-supplied data is sent to an interpreter as part of a command or query. The attacker's hostile data tricks the interpreter into executing involuntary commands or changing data. Injection flaws include XSS (HTML Injection) and SQL Injection.

Question 116

Question 117

Question 118

Question 119

Question 120

Download PDF File