156-110 Check Point Certified Security Principles Associate (CCSPA) Questions and Answers

E. IRC

SMTP

FTP

HTTP

PVP

Run the sample exploit against a test server.

Run the sample exploit against a production server.

Apply the patch to all production servers.

Test the patch on a production server.

Test the patch on a non-production server.

Espionage

Transposition cipher

Key exchange

Arithmancy

Steganography

Standard e-mail

Fax machine

Virtual private network

Bonded courier

Telephone

Inference

Social engineering

Movement analysis

Communication-pattern analysis

Aggregation

are required standards in health care and banking.

provide redundant systems and data backups.

control who is allowed to view and modify information.

are academic models not suitable for implementation.

set standards for acceptable media-storage devices.

AES

Blowfish

DES

CAST

Triple DES

The review and maintenance of security policies should be tied to the performance evaluations of accountable individuals.

Review requirements should be included in the security policies themselves.

When business requirements change, security policies should be reviewed to confirm that policies reflect the new business requirements.

Functional users and information custodians are ultimately responsible for the accuracy and relevance of information security policies.

In the absence of changes to business requirements and processes, information-security policy reviews should be annual.

Training material should be accessible and attractive.

Delivery mechanisms should allow easy development of additional materials, to complement core material.

Security-awareness training materials should never contradict an organizational security policy.

Appropriate language should be used to facilitate localization, should training materials require translation.

Written documentation should be archived, in case of disaster.

Accidental or intentional data deletion

Severe weather disasters

Employee terminations

Employee administrative leave

Minor power outages

Encryption

Checksum

Data hashes

Redundant servers

Security by obscurity

Elevate

Assume

Deny

Transfer

Mitigate