ISC2 CSSLP Exam Dumps

The National Institute of Standards and Technology (NIST), known between 1901 and 1988 as the National Bureau of Standards (NBS), is a

measurement standards laboratory which is a non-regulatory agency of the United States Department of Commerce. The institute's official

mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways

that enhance economic security and improve quality of life.

Answer D is incorrect. The Committee on National Security Systems (CNSS) is a United States intergovernmental organization that sets

policy for the security of the US security systems. The CNSS holds discussions of policy issues, sets national policy, directions, operational

procedures, and guidance for the information systems operated by the U.S. Government, its contractors, or agents that contain classified

information, involve intelligence activities, involve cryptographic activities related to national security, etc.

Answer A is incorrect.

The National Security Agency/Central Security Service (NSA/CSS) is a crypto-logic intelligence agency of the United States government. It is

administered as part of the United States Department of Defense. NSA is responsible for the collection and analysis of foreign communications

and foreign signals intelligence, which involves cryptanalysis.

NSA is also responsible for protecting U.S. government communications and information systems from similar agencies elsewhere, which

involves cryptography. NSA is a key component of the U.S. Intelligence Community, which is headed by the Director of National Intelligence.

The Central Security Service is a co-located agency created to coordinate intelligence activities and co-operation between NSA and U.S.

military cryptanalysis agencies. NSA's work is limited to communications intelligence. It does not perform field or human intelligence activities.

Answer C is incorrect. The United States Congress is the bicameral legislature of the federal government of the United States of

America. It consists of the Senate and the House of Representatives. The Congress meets in the United States Capitol in Washington, D.C.

Both senators and representatives are chosen through direct election.

Each of the 435 members of the House of Representatives represents a district and serves a two-year term. House seats are apportioned

among the states by population. The 100 Senators serve staggered six-year terms. Each state has two senators, regardless of population.

Every two years, approximately one-third of the Senate is elected at a time. The United States Congress main function is to make laws. The

Office of the Law Revision Counsel organizes and publishes the United States Code (USC). It is a consolidation and codification by subject

matter of the general and permanent laws of the United States.

The functional requirements categorize the different functions that the system will need to perform in order to gather the documented

mission/business needs. The functional requirements describe the elements such as quantity, quality, coverage, timelines, and availability.

Answer C is incorrect. The performance requirements comprise of speed, throughput, accuracy, humidity tolerances, mechanical

stresses such as vibrations or noises.

Answer A is incorrect. Human factor consists of factors, which affect the operation of the system or component, such as design space,

eye movement, or ergonomics.

Answer D is incorrect. The operational scenarios provide assistance to the system designers and form the basis of major events in the

acquisition phases, such as testing the products for system integration. The customer classifies and defines the operational scenarios, which

indicate the range of anticipated uses of system products.

A trademark is a name, symbol, or slogan with which a product is identified. Its uniqueness makes the product noticeable among the same

type of products. For example, Pentium and Athlon are brand names of the CPUs that are manufactured by Intel and AMD, respectively.

The trademark law protects a company's trademark by making it illegal for other companies to use it without taking prior permission of the

trademark owner. A trademark is registered so that others cannot use identical or similar marks.

Answer C is incorrect. A trade secret is a formula, practice, process, design, instrument, pattern, or compilation of information which is

not generally known. It helps a business to obtain an economic advantage over its competitors or customers. In some jurisdictions, such

secrets are referred to as confidential information or classified information.

Answer B is incorrect. A copyright is a form of intellectual property, which secures to its holder the exclusive right to produce copies of

his or her works of original expression, such as a literary work, movie, musical work or sound recording, painting, photograph, computer

program, or industrial design, for a defined, yet extendable, period of time. It does not cover ideas or facts. Copyright laws protect intellectual

property from misuse by other individuals.

Answer D is incorrect. A patent is a set of exclusive rights granted to anyone who invents any new and useful machine, process,

composition of matter, etc. A patent enables the inventor to legally enforce his right to exclude others from using his invention.

The annualized loss expectancy in her project will be $2,500.

Annualized loss expectancy (ALE) is the annually expected financial loss to an organization from a threat. The annualized loss expectancy

(ALE) is the product of the annual rate of occurrence (ARO) and the single loss expectancy (SLE). It is mathematically expressed as follows:

ALE = Single Loss Expectancy (SLE) * Annualized Rate of Occurrence (ARO)

Here, it is as follows:

ALE = SLE * ARO

= 250,000 * 0.01

= 2,500

Answer D, C, and A are incorrect. These are not valid answers.

Security constraint is a type of declarative security, which specifies the protection of web content. It also specifies access privileges to a

collection of resources by using the URL mapping. A deployment descriptor is used to define the security constraint. Security constraint

includes the following elements:

Web resource collection

Authorization constraint

User data constraint

Answer A is incorrect. Code Access Security (CAS), in the Microsoft .NET framework, is Microsoft's solution to prevent untrusted code

from performing privileged actions. When the CLR (common language runtime) loads an assembly it will obtain evidence for the assembly and

use this to identify the code group that the assembly belongs to. A code group contains a permission set (one or more permissions). Code

that performs a privileged action will perform a code access demand, which will cause the CLR to walk up the call stack and examine the

permission set granted to the assembly of each method in the call stack. The code groups and permission sets are determined by the

administrator of the machine who defines the security policy.

Answer D is incorrect. Access Management is used to grant authorized users the right to use a service, while preventing access to non-

authorized users. The Access Management process essentially executes policies defined in IT Security Management. It is sometimes also

referred to as Rights Management or Identity Management. It is part of Service Operation and the owner of Access Management is the

Access Manager. Access Management is added as a new process to ITIL V3. The sub-processes of Access Management are as follows:

Maintain Catalogue of User Roles and Access Profiles

Manage User Access Requests

Answer C is incorrect. Configuration Management (CM) is an Information Technology Infrastructure Library (ITIL) IT Service

Management (ITSM) process. It tracks all of the individual Configuration Items (CI) in an IT system, which may be as simple as a single server,

or as complex as the entire IT department. In large organizations a configuration manager may be appointed to oversee and manage the CM

process.