cissp精编自测题及详解5p.docVIP

CISSP精编自测题答案及详解 CBK Domain Access Control System 访问控制系统 1 Answer： A 2 Answer： A 3 Answer： D The smart card or chip contains information pertaining to the subscriber, such as the cell phone number belonging to the subscriber, authentication information, encryption keys, directory of phone numbers, and short saved messages belonging to that subscriber. 4 Answer：C CBK Domain Application and System Development 应用系统开发 1 Answer：A If another user at a lower classification level attempts to create a confidential entry for another military unit using the same identification number as a primary key, a rejection of this attempt would infer to the lower level user that the same identification number existed at a higher level of classification. To avoid this inference channel of information Chosen value是密码学里的概念 2 Answer:B 3 Answer: D 4 Answer: A A reference monitor is a system component that enforces access controls on an object. Therefore, the reference monitor concept is an abstract machine that mediates all access of subjects to objects. 5 Answer: D Test Data Method ：Processing specially prepared sets of input data integrated test facility：One or more audit module designed into the application during the system development A Parallel Simulation：Using a program that simulates the key features of the application under review 6 Answer: B Polyinstantiation. Polyinstantiation is the development of a detailed version of an object from another object using different values in the new object. In database information security, this term is concerned with the same primary key for different relations at different classification levels being stored in the same database. 7Answer: A 8Answer: D The value of a neural network is its ability to dynamically adjust its weights in order to associate the given input vectors with corresponding output vectors. All in one: Application P729 Data mining can look at complex data and simplify it by using fuzzy logic, set theory, and neural networks