Which of the following media sanitization techniques is MOST likely to be effective for an organization using public cloud services?
Correct Answer: C
Media sanitization is the process of rendering the data on a storage device inaccessible or unrecoverable by a given level of effort. For an organization using public cloud services, the most effective media sanitization technique is cryptographic erasure, which involves encrypting the data on the device with a strong key and then deleting the key, making the data unreadable. Cryptographic erasure is suitable for cloud environments because it does not require physical access to the device, it can be performed remotely and quickly, and it does not affect the performance or lifespan of the device. Low-level formatting, secure-grade overwrite erasure, and drive degaussing are media sanitization techniques that require physical access to the device, which may not be possible or feasible for cloud users. Additionally, these techniques may not be compatible with some cloud storage technologies, such as solid-state drives (SSDs) or flash memory, and they may reduce the performance or lifespan of the device.
Question 152
What is the MOST effective method of testing custom application code?
Correct Answer: B
White box testing is the most effective method of testing custom application code because it involves examining the internal structure and logic of the code, which can reveal errors, vulnerabilities, and inefficiencies that may not be detected by other methods. White box testing can also help improve the design, quality, and security of the code by applying techniques such as code coverage, code analysis, and code review. White box testing requires access to the source code and knowledge of the programming language and tools used to develop the code.
Question 153
Controls such as job rotation, the sharing of responsibilities, and reviews of audit records are associated with:
Correct Answer: D
Additional detective/administrative controls are job rotation, the sharing of responsibilities, and reviews of audit records. Reference(s) used for this question: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 35
Question 154
What is the term commonly used to refer to a technique of authenticating one machine to another by forging packets from a trusted source?
Correct Answer: D
The term commonly used to refer to a technique of authenticating one machine to another by forging packets from a trusted source is spoofing. Spoofing is a type of attack that involves impersonating or masquerading as a legitimate entity, such as a user, a device, or a network, by altering or falsifying the source or destination address of a packet. Spoofing can be used to bypass authentication, gain unauthorized access, or launch other attacks, such as denial-of- service or man-in-the-middle. Man-in-the-middle, smurfing, and session redirect are not terms that refer to a technique of authenticating one machine to another by forging packets from a trusted source, as they are related to different types of attacks or techniques. Man-in-the-middle is an attack that involves intercepting and modifying the communication between two parties. Smurfing is an attack that involves sending a large number of ICMP echo requests to a network broadcast address, using a spoofed source address of the intended victim. Session redirect is a technique that involves changing the destination address of a packet to redirect it to a different location.
Question 155
Which of the following is the MOST important consideration in a full-scale Disaster Recovery (DR) test?
Correct Answer: A
The MOST important consideration in a full-scale Disaster Recovery (DR) test is ensuring that business operations are not negatively affected. The goal of a DR test is to validate that the disaster recovery plan works effectively without causing significant disruption to business activities. While testing the plan is crucial, it is essential that normal operations can continue with minimal impact, or that any downtime is managed and mitigated appropriately.