What is the purpose of Trusted Distribution?
A.
To ensure that messages sent from a central office to remote locations are free from tampering.
B.
To prevent the sniffing of data as it travels through an untrusted network enroute to a trusted network.
C.
To ensure that the Trusted Computing Base is not tampered with during shipment or installation.
D.
To ensure that messages received at the Trusted Computing Base are not old messages being resent as
part of a replay attack.
Explanation:
The purpose of trusted distribution is to ensure that the Trusted Computing Base is not tampered with during
shipment or installation.
Hostile attacks may occur on computer systems when they are in use, but it is also possible for computer
systems to be attacked even before they are installed at a customer site.
Trusted distribution is one link in a chain of assurances provided by trusted systems. It is helpful to take a look
at all of the other activities that take place to ensure that the system in operation is the one that the vendor and
customer agree upon.
The following is a summary of the assurances that are needed to ensure that the product delivered to a
customer site is operating under a correct implementation of the system’s security policy:
Assurance that the product evaluated is the one the manufacturer built
Assurance that the product built is the one that was sent
Assurance that the product sent is the one the customer site received.
Incorrect Answers:
A: It is not the purpose of trusted distribution to ensure that messages sent from a central office to remote
locations are free from tampering.
B: It is not the purpose of trusted distribution to prevent the sniffing of data as it travels through an untrusted
network enroute to a trusted network.
D: It is not the purpose of trusted distribution to ensure that messages received at the Trusted Computing Base
are not old messages being resent as part of a replay attack.http://home.bi.no/fag86013/annet/trdistgd.html
Has anyone taken the CISSP exam recently and seen questions similar to these on there?
0
0
None of the questions given here will appear on the test. N-O-N-E. I took test in September 2017. NOT A SINGLE QUESTION FROM ANYWHERE ON THE INTERNET (not only from this site but from anywhere on the internet) came on the test. NONE. Zilch, Nada, Zip. These questions just give you practice and once you are in exam, you are on your own.
Prepare with the subject well and expect to see none of these on test. It is 70% effort and 30% PURE LUCK to pass the exam. Without luck it is pretty hard to pass. To me it appears ISC just wants to make money by failing people and make them take the test again. There is really no need to put a test for 6 hours and charge $600. It is all twist of English language trying to confuse the candidate as much as possible.
People tell you to read Shon Harris (Agreed it is a great book though) and they passed. But ask them if they remember what was in first chapter when they completed the last chapter. We all know the answer. Reading a 1000 page book and remembering it in full in not a human thing. You can read any number of books but without 30% luck there is no use. So pray to God and prepare well. Be prepared to lose the $600 for a few times before ISC notes that you are attempting the test repeatedly and will be kind enough to pass you.
0
0
Would agree to ABD. There is not a single question from these dumps in exam. You can test how you remember the topics with these questions, but keep in mind that
a) simply memorizing would not work – you’ll have to understand the issue to answer correctly. The answer options provided in such a way that none of them answers perfectly; you have to choose the best option from the list of not-so-perfect ones based on context or make some conclusions.
b) I believe a book by S. Harris is still the best resource, but it does not cover all you need to know.
The algorithm that worked for me was
– read the book. Twice.
– get the official test app (it’s not so expensive) and answer all questions. Notice those that you did not answer correctly.
– Either re-read relevant topics or google answers to questions not covered by book.
– Answer all questions from one of the dumps provide here. This dump is quite different from that of official test app.
– Repeat step above.
This might look like a huge effort but actually it is. I was lucky to pass from 1st attempt.
Good luck.
0
0
Ahh, forgot: there are no NIST of US legislation questions. Don’t waste your time memorizing this stuff.
0
0
I did the test and was approved in November 2017. I did not really see any questions identical to those on this website, but all the topics were used. It is important to understand all topics. Fortunately no question of decorating was asked.
0
0
ABD i couldn’t agree more. It’s just a money making trick. even the isc bootcamp instructors are absolute numpties. just read from the powerpoints and thats about it. its just a stamp that you sat an exam.
0
0