CISSP Sample Test 错题集3

103. Lynn logs into a website and purchases an airline ticket for her upcoming trip. The website
also offers her pricing and package deals for hotel rooms and rental cars while she is
completing her purchase. The airline, hotel, and rental companies are all separate and
individual companies. Lynn decides to purchase her hotel room through the same website
at the same time. The website is using Security Assertion Markup Language to allow for
this type of federated identity management functionality. In this example which entity is
the principal, which entity is the identity provider, and which entity is the service provider?
A. Portal, Lynn, hotel company
B. Lynn, airline company, hotel company
C. Lynn, hotel company, airline company
D. Portal, Lynn, airline company

B. In this scenario, Lynn is considered the principal, the airline company is considered the
identity provider, and the hotel company that receives the user’s authentication information
from the airline company web server is considered the service provider. Security Assertion
Markup Language (SAML) provides the authentication pieces to federated identity
management systems to allow business-to-business (B2B) and business-to-consumer (B2C)
transactions.

104. John is the new director of software development within his company. Several proprietary
applications offer individual services to the employees, but the employees have to log into
each and every application independently to gain access to these discrete services. John
would like to provide a way that allows each of the services provided by the various
applications to be centrally accessed and controlled. Which of the following best describes
the architecture that John should deploy?
A. Service-oriented architecture
B. Web services architecture
C. Single sign-on architecture
D. Hierarchical service architecture

A. The use of web services in this manner also allows for organizations to provide serviceoriented
architecture (SOA) environments. SOA is way to provide independent services
residing on different systems in different business domains in one consistent manner. This
architecture is a set of principles and methodologies for designing and developing software
in the form of interoperable services.

关键需求点：

1. "Several proprietary applications offer individual services"
2. "centrally accessed and controlled"
3. 需要整合多个独立的服务

关键需求点：

1. "Several proprietary applications offer individual services"
2. "centrally accessed and controlled"
3. 需要整合多个独立的服务

比较分析：

1. "Several proprietary applications offer individual services"
2. "each of the services provided by the various applications to be centrally accessed and controlled"
3. 需求不仅仅是解决登录问题，更重要的是要实现服务的集中访问和控制

SOA vs SSO 比较：

A. Service-oriented architecture (SOA)

• 更全面的解决方案，包括：
  • 服务的整合和重用
  • 跨系统的服务调用
  • 统一的服务访问接口
  • 服务的解耦和独立性
  • 支持不同业务域之间的服务互操作性
• 关注点是服务的架构和整合

C. Single sign-on architecture (SSO)

• 主要解决认证问题：
  • 统一的登录入口
  • 减少重复登录
  • 身份验证的集中管理
• 关注点仅限于用户认证层面

为什么A是更好的答案：

1. 问题的本质：题目描述的核心是要实现各种服务的集中访问和控制，而不仅仅是解决登录问题

2. 解决方案的完整性：

   • SOA提供了更完整的解决方案，包括服务的整合、访问和控制
   • SSO只解决了认证问题，但没有解决服务整合的问题

3. 业务需求的匹配：

   • 题目中提到"各种专有应用程序提供独立的服务"，这正是SOA擅长处理的场景
   • SOA可以提供一个统一的框架来整合这些独立的服务

4. 可扩展性：

   • SOA提供了更好的可扩展性，可以随着业务需求的变化添加或修改服务
   • SSO主要关注用户访问控制，在服务整合方面较为局限

所以，B. Web services architecture 确实是最佳答案，因为它：

• 提供了具体的技术实现方案
• 能够实现服务的集中访问和控制
• 支持跨平台服务整合
• 符合现代企业应用集成的需求

A (Service Oriented Architecture) 和 B (Web Services Architecture) 的差异以及为什么 A 是最佳答案

1. 定义层面分析：

• SOA:

  • SOA 是一种架构风格或设计理念，它定义了一套原则和方法，用来设计和开发由独立服务组成的软件系统。
  • 这些服务是自治的，可以分布在不同系统或业务领域内，并通过标准化接口以一致的方式提供。
  • 核心是服务的整合与解耦，不是某种具体技术，而是一个具有高度抽象性的企业解决方案。
  • 关键：SOA 对于题目中 "如何设计或实现基础架构以支持独立服务的整合和集中访问" 是最匹配的，因为它强调解决服务整合问题。

• WSA:

  • Web 服务架构是 SOA 的一个实际实现技术，是通过基于网络的技术（如 SOAP、WSDL、HTTP）来实现服务的互操作性和调用。
  • WSA 是一种架构实现方式，而非顶层的架构风格。
  • 重点在于通过技术实现具体的服务通信和调用，而不能单独定义一个完整的服务治理或设计模型。
  • 关键：虽然 Web Services 是 SOA 的技术支撑，但它不具备 SOA 的广泛性和高层次设计理念，局限于基于 Web 技术的实现。

2. 功能层面分析

• SOA 的功能：

  • 提供面向业务的服务整合模型。
  • 强调松耦合和标准化，支持跨平台和跨业务领域服务的互操作性。
  • 涉及服务治理、服务发现 (比如服务目录)、服务复用等。

• Web Services 的功能：

  • 注重通过 Web 技术暴露和访问服务，与服务治理关系较弱。
  • 主要是实现某一特定技术解决方案（比如使用 WSDL 定义服务接口、用 SOAP 调用服务）。
  • 更倾向于是一种实现手段，而不是顶层的服务整合框架。

3. 为什么 SOA 是最佳答案？

• 题目中描述了一个高层次的需求 —— 各种服务需要被集中访问和控制。这并非单纯是技术实现的问题，而是一个更广泛的服务架构层面的问题。

• SOA 的架构理念和方法可以解决这个需求，因为：

  1. SOA 强调整合分布式的、独立的服务。
  2. SOA 提供的方法不仅有助于服务发现和治理，还可以通过标准化接口的方式统一控制服务访问。
  3. 虽然 Web Services 是一个实现手段，但它不足以从架构设计的层面满足服务集中控制和企业服务管理的需求。

• Web Services（选项 B）虽然能实现 SOA，但作为一个低层次实现手段，它不具备 SOA 的抽象性和全面性：

  • Web Services 聚焦于通过技术手段提供服务调用。
  • 它无法独立提供服务架构设计、服务治理和高层整合能力。
  • 题目目标聚焦在 "设计一个集中访问控制的服务架构"，SOA 更适合回答 "为什么要这样做" 和 "如何整体实现"。

4. 为什么不选择 B？

从技术角度直观上来看，Web Services 作为一种实现手段跟题目中的描述（独立应用提供的服务需要集中访问）最直接相关。由于 Web Services 可通过标准化的 Web 协议暴露服务，也能够实现跨平台和分布式调用。

然而，这种分析忽略了题目本身的重点是服务架构的设计，而不仅是技术的实现。如果完全没有"SOA" 这个选项，可以选择 B。但当 SOA 出现在选项时，我们必须优先考虑 SOA，因为它包含了 B 的实现，同时具有更高层次的指导作用。

总结

• SOA（A）是顶层设计的理念，为服务整合和集中控制提供了基础架构。
• Web Services（B）是 SOA 的具体实现手段，仅限于技术层。
• 在解决题目描述的服务集中访问和协调问题时，推荐答案必须是 A：Service-Oriented Architecture，因为它可以指导服务的整体架构设计，而不仅仅是实现。

105. Which security model enforces the principle that the security levels of an object should
never change and is known as the “strong tranquility” property?
A. Biba
B. Bell-LaPadula
C. Brewer-Nash
D. Noninterference

B. Bell-LaPadula models have rigid security policies that are built to ensure confidentiality.
The “strong tranquility” property is an inflexible mechanism that enforces the consistent
security classification of an object.

在计算机安全领域，strong tranquility（强宁静性）是一个与访问控制和数据安全性相关的概念，通常出现在与信息隔离和权限管理有关的系统中。这个术语主要用于描述一个系统或模型在面对其改动时的状态维持特性。

强宁静性（Strong Tranquility）的定义

强宁静性指的是在系统运行期间，不论是对其安全策略、访问控制还是数据存储的更改，系统内的对象（如资源或数据）的安全状态或安全标签不会因外部环境的变化而改变。换句话说，在不对系统产生影响的情况下，安全策略或访问规则的更改不会导致数据隐私或安全性的下降。

上下文和应用

• 信息安全政策：在完全采用强宁静性的设计的系统中，如果用户的权限被更新或系统的安全策略被修改，这些修改将不会影响已存在的数据的安全属性。例如，如果一个系统的某些数据被标记为“机密”，并经过严格的安全限制以达到强宁静性，任何后续的用户权限变更和政策变更均不能对已标记数据的机密性产生负面影响。

• 操作系统与安全模型：在某些安全模型（比如Bell-LaPadula模型）中，强宁静性确保对象的安全级别不会在运行时被改变，从而增强了系统的稳定性和数据的保护。

110. An operating system has many different constructs to keep all of the different execution
components in the necessary synchronization. One construct the operating system
maintains is a process table. Which of the following best describes the role of a process
table within an operating system?
A. The table contains information about each process that the CPU uses during the
execution of the individual processes’ instructions.
B. The table contains memory boundary addresses to ensure that processes do not corrupt
each other’s data.
C. The table contains condition bits that the CPU uses during state transitions.
D. The table contains I/O and memory addresses.

A. The operating system keeps a process table, which has one entry per process. The table
contains each individual process’s state, stack pointer, memory allocation, program
counter, and status of open files in use. The reason the operating system documents all of
this status information is that the CPU needs all of it loaded into its registers when it needs
to interact with, for example, process 1. The CPU uses this information during the
execution activities for specific processes.

111. Hanna is a security manager of a company that relies heavily on one specific operating
system. The operating system is used in the employee workstations and is embedded within
devices that support the automated production line software. She has uncovered that the
operating system has a vulnerability that could allow an attacker to force applications to not
release memory segments after execution. Which of the following best describes the type
of threat this vulnerability introduces?
A. Injection attacks
B. Memory corruption
C. Denial of service
D. Software locking

C. Attackers have identified programming errors in operating systems that allow them to
“starve” the system of its own memory. This means the attackers exploit a software
vulnerability that ensures that processes do not properly release their memory resources.
Memory is continually committed and not released, and the system is depleted of this
resource until it can no longer function. This is an example of a denial-of-service attack.

在Hanna发现的情况下，该操作系统存在一种漏洞，可能导致应用程序在执行后不释放内存段。这种情况最准确地描述的威胁类型是：

C. Denial of service

理由：

1. A. Injection attacks（注入攻击）：注入攻击通常涉及将恶意代码或命令插入到其他程序中，这种情况与未释放的内存段无关。

2. B. Memory corruption（内存损坏）：虽然该漏洞可能会导致内存中的不当访问或改变，但未释放内存更直接涉及对系统资源的管理，并不完全符合“内存损坏”的定义。

3. C. Denial of service（拒绝服务）：当应用程序不释放内存段时，可能导致内存耗尽，从而使得合法用户无法获得必要的资源来执行其操作。这个情况直接导致服务不可用，因此属于拒绝服务攻击的范畴。

4. D. Software locking（软件锁定）：软件锁定通常指的是程序被锁定在某种状态或条件下，导致无法继续执行，而不是特指内存管理问题。

总结

由于漏洞导致应用程序无法释放内存段，可能会使系统资源逐渐耗尽，从而造成合法用户无法访问相关服务，因此 C. Denial of service 是最佳描述这一威胁类型的选项。

120. What is the purpose of the Logical Link Control (LLC) layer in the OSI model?
A. Provides a standard interface for the network layer protocol
B. Provides the framing functionality of the data link layer
C. Provides addressing of the packet during encapsulation
D. Provides the functionality of converting bits into electrical signals

A. The data link layer has two sublayers: the Logical Link Control (LLC) and Media
Access Control (MAC) layers. The LLC provides a standard interface for whatever
network protocol is being used. This provides an abstraction layer so that the network
protocol does not need to be programmed to communicate with all of the possible MAClevel
protocols (Ethernet, Token Ring, WLAN, FDDI, etc.).

122. John is a security engineer at a company that develops highly confidential products for
various government agencies. While his company has VPNs set up to protect traffic that
travels over the Internet and other nontrusted networks, he knows that internal traffic
should also be protected. Which of the following is the best type of approach John’s
company should take?
A. Implement a data link technology that provides 802.1AE security functionality.
B. Implement a network-level technology that provides 802.1AE security functionality.
C. Implement TLS over L2TP.
D. Implement IPSec over L2TP.

A. 802.1AE is the IEEE MAC Security standard (MACSec), which defines a security
infrastructure to provide data confidentiality, data integrity, and data origin authentication.
Where a VPN connection provides protection at the higher networking layers, MACSec
provides hop-by-hop protection at layer 2.

125. Larry is a seasoned security professional and knows the potential dangers associated with
using an ISP’s DNS server for Internet connectivity. When Larry stays at a hotel or uses his
laptop in any type of environment he does not fully trust, he updates values in his HOSTS
file. Which of the following best describes why Larry carries out this type of task?
A. Reduces the risk of an attacker sending his system a corrupt ARP address that points his
system to a malicious website
B. Ensures his host-based IDS is properly updated
C. Reduces the risk of an attacker sending his system an incorrect IP address-to-host
mapping that points his system to a malicious website
D. Ensures his network-based IDS is properly synchronized with his host-based IDS

C. The HOSTS file resides on the local computer and can contain static hostname-to-IP
mapping information. If you do not want your system to query a DNS server, you can add
the necessary data in the HOSTS file, and your system will first check its contents before
reaching out to a DNS server. Some people use these files to reduce the risk of an attacker
sending their system a bogus IP address that points them to a malicious website.

理由：

1. A. Reduces the risk of an attacker sending his system a corrupt ARP address that points his system to a malicious website：

   • ARP（地址解析协议）攻击通常涉及物理网络层面，和HOSTS文件直接没有关系。HOSTS文件主要处理DNS解析，而不是ARP。

2. B. Ensures his host-based IDS is properly updated：

   • 更新HOSTS文件不会直接与主机入侵检测系统（IDS）的更新有关。

3. C. Reduces the risk of an attacker sending his system an incorrect IP address-to-host mapping that points his system to a malicious website：

   • 通过更新HOSTS文件，Larry可以手动指定域名及其对应的IP地址，这样可以防止DNS伪造或中间人攻击（如DNS欺骗），从而确保连接到安全的IP地址，并减少被指向恶意网站的风险。

4. D. Ensures his network-based IDS is properly synchronized with his host-based IDS：

   • HOSTS文件的更新与网络或主机入侵检测系统的同步没有直接关系。

总结

Larry更新HOSTS文件的目的是为了直接控制域名解析过程，防止可能的DNS攻击，确保访问的地址是安全的。因此，C 是最佳答案，清晰地描述了他的目的和行动。