3.4 - Understand Security Capabilities of Information Systems (IS) (e.g., Memory Protection, Trusted Platform Module (TPM), Encryption/decryption) CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which memory protection mechanism prevents the execution of code from memory regions that are designated as data-only, such as the stack or heap?

   • AAddress Space Layout Randomization (ASLR)
   • BData Execution Prevention (DEP)
   • CSegmentation
   • DPaging
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An organization's web server presents a certificate to clients. A client's browser rejects the certificate with an error stating that the certificate is not trusted. The certificate has not expired and the hostname matches. What is the MOST likely cause of this error?

   • AThe certificate was encrypted with the server's public key.
   • BThe server's private key was encrypted with a weak algorithm.
   • CThe certificate was hashed with MD5.
   • DThe certificate was signed by a certificate authority (CA) that is not in the client's trusted root store.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which technology is an example of a Trusted Execution Environment (TEE) that provides hardware-based isolation for sensitive code and data?

   • AIntrusion Detection System (IDS)
   • BFirewall
   • CARM TrustZone
   • DVirtual Private Network (VPN)
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of securely distributing cryptographic keys to authorized parties?

   • ATo increase the speed of encryption algorithms
   • BTo ensure that only authorized parties can encrypt and decrypt data
   • CTo allow anyone to decrypt data without a key
   • DTo store keys in a public repository for easy access
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A database administrator needs to protect a specific column containing social security numbers (SSNs) in a large database. The application frequently queries this column by exact value (e.g., WHERE ssn = '123-45-6789'). The administrator wants to minimize the performance impact on queries while still protecting the data. Which approach is MOST appropriate?

   • AHash the SSNs using SHA-256 and store the hash values in the column.
   • BEncrypt the entire database backup file.
   • CEnable Transparent Data Encryption (TDE) on the entire database.
   • DUse column-level encryption and store the encrypted values in a separate column, and create an index on the encrypted values.
   Reveal Solution Discussion Select an answer first