Читаем CISSP Practice полностью

28. c. Identification (ID) badge cards are an example of physical security controls and are not complementary with the given logical security controls. A function or an area need not be weak to use complementary controls. Complementary controls can enhance the effectiveness of two or more controls when applied to a business function, computer program, or operation. These individual controls are effective as a standalone and are maximized when combined or integrated with each other. In other words, complementary controls have a synergistic effect. Access profiles, user IDs, and passwords go together to provide a moderate level of an access control mechanism. Profiles are needed for each system user to define what he can do on the system. User IDs and passwords are needed to identify and authenticate the user to the computer system. These three controls are examples of logical access security controls, where they provide a technical means of controlling what information users can utilize, the computer programs they can run, and the modifications they can make to programs and data files.

29. Why is it better to use a biometric control along with an access key?

a. It provides a preventive control.

b. It provides a detective control.

c. It provides a corrective control.

d. It provides a two-factor control.

29. d. Biometrics and access keys are two separate controls, providing a two-factor authentication. When they are combined in a session, they provide a synergistic or combination control. The total effect is greater than the single control alone.

30. Which of the following is ineffective in extinguishing Class A and B fires in a building?

a. Carbon dioxide

b. Water fog

c. Dry powder

d. Dry chemical

30. c. Dry powder is effective against Class D fires and ineffective against Class A and B fires. The other three choices are effective against Class A and B fires. Water fog is created by a special nozzle on the water hose.

31. Which one of the following power problems is unlike the others?

a. Sags

b. Spikes

c. Blackouts

d. Surges

31. c. A blackout is a total loss of power, lasting several minutes to several hours, caused by damage to power lines and equipment, commonly due to weather conditions. Sags create under-voltage conditions. Spikes and surges create over-voltage conditions.

32. In a fire-extinguishing environment, what is a dry pipe?

a. A sprinkler system in which the water does not enter the pipes until the automatic sensor indicates that there is a fire in the area

b. A sprinkler system in which the water is in the pipe, but the outside of the pipe is dry

c. A Halon gas system that contains a dry pipe

d. A carbon dioxide (CO2) gas system that has a dry chemical to extinguish a fire

32. a. The sequence of dry-pipe actions is (i) a heat or smoke sensor is activated first, (ii) water fills the previously empty pipes leading to the sprinklers, (iii) the alarm is sounded, and (iv) the electrical power supply is disconnected automatically. The choice “A sprinkler system in which the water is in the pipe, but the outside of the pipe is dry” is incorrect because water is not in the pipe until the heat or smoke sensor is activated. The choice “A Halon gas system that contains a dry pipe” and the choice “A carbon dioxide (CO2) gas system that has a dry chemical to extinguish a fire” are incorrect because the descriptions are meaningless.

33. In most cases, what can take the heat off the fire safely?

a. Water

b. Carbon dioxide

c. Soda ash

d. Halon gas

33. a. Water takes the heat off the fire, and it is safe compared to the other choices. Carbon dioxide, soda ash, and Halon can be injurious.

34. What is an under-voltage in electric power called?

a. Brownout

b. Blackout

c. Burnout

d. Dropout

34. a. A brownout is a condition in which electrical power dips below normal for more than a few seconds and is caused by under-voltage. Brownouts are a result of a load near to or equaling generating capacity. A blackout is a complete loss of electrical power (that is, actual failure). Blackouts can result from windstorms, floods, failures of electronic system equipment, or human error. A dropout is an area on a disk or tape that cannot effectively record data. Persistent brownouts can cause data corruption and loss and can also cause computer power supplies to overheat and burn out.

35. Which of the following fire types is most common?

a. Furniture fires

b. Electrical fires

c. Paper fires

d. Gasoline fires