156-110 Check Point Certified Security Principles Associate (CCSPA) Questions and Answers

Preventing modification of restricted information

Using restricted programs, to access databases and other information resources

Allowing access from any location

Preventing access to any network resource, other than those explicitly permitted

Viewing inventory levels for partner products only

Reviewing IDS alerts

Reviewing performance logs

Reviewing IDS logs

Reviewing audit logs

Reviewing system logs

Discretionary

Role-based

Nondiscretionary

Hybrid

Mandatory

Adversaries sort through trash to find information.

Adversaries use anomalous traffic patterns as indicators of unusual activity. They will employ other methods, such as social engineering, to discover the cause of the noise.

Adversaries use movement patterns as indicators of activity.

Adversaries take advantage of a person's trust and goodwill.

Seemingly, unimportant pieces of data may yield enough information to an adversary, for him to disseminate incorrect information and sound authoritative.

Hire an investigation agency to run background checks.

Verify all dates of previous employment.

Question candidates, using polygraphs.

Contact personal and professional references.

Run criminal-background checks.

Payroll information

Data objects used by many employees

Databases

Interoffice memo

Customer correspondence

significantly reduce the chance information will be modified by unauthorized entities.

only be used to protect data in transit. Encryption provides no protection to stored data.

allow private information to be sent over public networks, in relative safety.

significantly reduce the chance information will be viewed by unauthorized entities.

prevent information from being destroyed by malicious entities, while in transit.

On-line training

Formal classroom training

Train-the-mentor training

Alternating-facilitator training

Self-paced training

Extrapolate results from a limited subset.

Eliminate the testing phase of change control.

Request additional hardware and software.

Refuse to implement change requests.

Deploy directly to the production environment.

Pattern matching

Statistical anomaly

Behavioral analysis

Host

Network

When new functional users join an organization

On the anniversary of the procedures' implementation

Each time procedures are used

Whenever business processes are modified

When new exploits and attacks are discovered

Delegating risk to another entity, such as an insurer

Manual procedures; alternative solution to technology available

Deferring action; action waiting until a later date

Reciprocal agreements with another organization

Doing nothing; no action taken to recover the technology