CISSP Flashcards

Which type of malware disguises itself as legitimate software but performs malicious actions when executed?

Answer: Trojan horse

A Trojan horse masquerades as benign or useful software while secretly performing malicious functions when executed by the user.

In the context of risk management, what does 'residual risk' mean?

Answer: The risk that remains after controls have been implemented

Residual risk is the remaining risk exposure after security controls have been applied to mitigate the inherent risk.

An attacker sends a fraudulent email appearing to come from the CEO requesting an urgent wire transfer. This is BEST classified as:

Answer: Whaling

Whaling is a phishing attack that specifically targets high-profile individuals like executives, often impersonating them for financial fraud.

Which network security device operates at Layer 7 and can inspect application-layer content for threats?

Answer: Next-generation firewall (NGFW)

Next-generation firewalls operate at Layer 7 (application layer) and can perform deep packet inspection, application identification, and intrusion prevention.

What is the purpose of a 'chain of custody' in digital forensics?

Answer: Documenting the handling and transfer of evidence to maintain its integrity

Chain of custody documents every person who handled evidence and all actions taken, proving the evidence has not been tampered with.

Which cryptographic property ensures that a sender cannot later deny having sent a message?

Answer: Non-repudiation

Non-repudiation, typically achieved through digital signatures, prevents a party from denying the authenticity of their actions or communications.

An organization wants to test its incident response procedures without disrupting production systems. Which exercise type is MOST appropriate?

Answer: Tabletop exercise

A tabletop exercise walks participants through a simulated scenario verbally without activating actual systems or recovery procedures.