ISC2 CSSLP Exam - Topic 6 Question 83 Discussion

Actual exam question for ISC2's CSSLP exam

Question #: 83
Topic #: 6

DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels. Which of the following MAC levels requires high integrity and medium availability?

AMAC III

BMAC IV

CMAC I

DMAC II

Show Suggested Answer

Suggested Answer: A, C, D

The security challenges for DRM are as follows:

Key hiding: It prevents tampering attacks that target the secret keys. In the key hiding process, secret keys are used for

authentication, encryption, and node-locking.

Device fingerprinting: It prevents fraud and provides secure authentication. Device fingerprinting includes the summary of hardware

and software characteristics in order to uniquely identify a device.

OTA provisioning: It provides end-to-end encryption or other secure ways for delivery of copyrighted software to mobile devices.

Answer B is incorrect. Access control is not a security challenge for DRM.

by Fabiola at Apr 12, 2024, 02:33 AM

Limited Time Offer

25%

Off

Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Latricia

4 months ago

Nope, MAC III is definitely correct.

upvoted 0 times

...

Glory

5 months ago

Surprised to see MAC III is the answer!

upvoted 0 times

...

Margot

5 months ago

I thought MAC II had those requirements?

upvoted 0 times

...

Lore

5 months ago

Totally agree, MAC III fits that description!

upvoted 0 times

...

Clement

5 months ago

MAC III is the one with high integrity and medium availability.

upvoted 0 times

...

Glen

6 months ago

I thought MAC IV had higher availability requirements, so I’m pretty sure it’s not that one. Could it really be MAC II?

upvoted 0 times

...

Refugia

6 months ago

I’m leaning towards MAC II as well, but I could be mixing it up with another question we practiced.

upvoted 0 times

...

Tiera

6 months ago

I remember studying the MAC levels, and I feel like MAC III might be the answer, but it’s been a while since I reviewed that section.

upvoted 0 times

...

Santos

6 months ago

I think MAC II is the one that requires high integrity and medium availability, but I’m not completely sure.

upvoted 0 times

...

Lettie

6 months ago

This is a good question to test our understanding of the MAC levels. I'll review the key details about each one and then select the answer that matches the high integrity and medium availability requirement.

upvoted 0 times

...

Luis

6 months ago

I'm not totally confident on this one. The MAC levels and their requirements can be tricky to keep straight. I'll have to carefully consider each option and try to eliminate the ones that don't fit the criteria.

upvoted 0 times

...

Orville

6 months ago

Okay, I got this. The question is asking which MAC level has high integrity and medium availability, and that's MAC III. I remember learning that in class.

upvoted 0 times

...

Aleta

6 months ago

Hmm, I'm a bit confused on the MAC levels and what each one requires. I'll need to review my notes on DoD 8500.2 to make sure I understand the differences between them.

upvoted 0 times

...

Maxima

6 months ago

I'm pretty sure this is asking about the MAC levels and their requirements. Let me think through this - MAC III requires high integrity and medium availability, so that's the answer.

upvoted 0 times

...

Artie

6 months ago

Okay, let's think this through. The servers didn't lose power, but the whole rack was inaccessible. That makes me think the issue is probably with the rack power or the switch power. I'll go with B, rack power, as my first choice.

upvoted 0 times

...

Richelle

6 months ago

I'm a little confused on the difference between the accrual basis and the modified statement of operations. I'll have to review my notes to make sure I understand which one this question is asking about.

upvoted 0 times

...

Velda

6 months ago

I think the answer might be VRF, since it supports separate routing instances for multiple tenants.

upvoted 0 times

...

Laquita

6 months ago

I'm a bit unsure about this one. Caching the packages might help, but I'm not sure if that's the only solution or if there are other ways to optimize the pipeline execution time.

upvoted 0 times

...

Glory

6 months ago

Okay, I think I've got it. The question is asking for the best way, and that would be to use the MAC address filtering feature on the access point. That's the most secure and straightforward solution.

upvoted 0 times

...