polymorphic virus has the ability to change its own signature at the time of infection. This virus is very complicated and hard to detect. When the user runs the infected file in the disk, it loads the virus into the RAM.
Smart card
Smart card is a credit card-sized device used to securely store personal information such as certificates, public and private keys, passwords, etc. It is used in conjunction with a PIN number to authenticate users.
Focus of this exam
The CISSP test measures the security professional’s knowledge and skills of Information security as well as safety and environmental issues. The CISSP curriculum covers a variety of Information Security topics. The examination is based on the (ISC)2 CISSP Common Body of Knowledge (or CBK).
Pre-requisite for taking the (ISC)2 Certified Information Systems Security Professional (CISSP) test
The pre-requisite for taking the (ISC)2 Certified Information Systems Security Professional (CISSP) test is to have a minimum of five years of full-time security professional work experience in two or more of the ten domains of the (ISC)2 CISSP Common Body of Knowledge (CBK). The candidates have to subscribe to the (ISC)2 Code of Ethics.
Other required information for CISSP exam
The CISSP test is one test required to achieve the CISSP certification as certified information security professionals.The test consists of multiple-choice.You are required to attempt all questions in 6 hour questions. There are no case study type questions, and the test is not adaptive. You will be required to attempt approximately 250 questions.
At the Testing center
1)You will be asked to present your ID and sign the log when you arrive at the testing center.
2)The center in-charge will explain the rules that you have to follow during the exam and will ask you to sign a paper stating that you understand the rules of the exams and will follow them.
3)You are not allowed to take in any sort of written or printed material with you to the exam. You will be provided with scratch paper, pencils and anything you need for the exam.
4)Before the test, you will have an opportunity to take a practice exam that is not related with the subject but will give you an orientation of the exam process.
4) If you have any problem regarding the testing process, you can ask the test administrator
Skills required for (ISC)2 CISSP test
ISC)2 Common Body of Knowledge (CBK) has specified objectives for the CISSP test. These objectives are grouped under ten CBK domains. Following are some important areas in which an individual should possess good knowledge before taking the CISSP test:
Implementing Internet security and handling types of attacks.
Configuring IPSec to secure communication between networks and hosts. Configuring IPSec authentication and troubleshooting IPSec.
Implementing security for wireless networks. Configuring public and private wireless LANs.
Deploying and managing SSL certificates. Configuring SSL to secure communication channels.
Configuring and troubleshooting authentication for Web users.
Configuring authentication for secure remote access. Managing client-computer configuration for remote access security.
Configuring and troubleshooting virtual private network (VPN) protocols.
Implementing Public key infrastructure and hashing function.
Installing and configuring Certificate Authority (CA) hierarchies, root, intermediate, and issuing CA. Managing Certificate Authorities (CAs).
Analyzing security events and responding to security incidents.
Identifying assets and their management. Protecting assets through fire prevention, detection, and suppression.
Implementing access control models, techniques, and technologies.
Designing secure data network, including OSI reference model, tcp/ip protocol suite, types of transmissions, and LAN networking.
Planning for preventive measures, recovery strategies, testing and revising plans.
Analyzing risk and using risk management tools and practices.
Understanding of types of law, regulations and crime. Knowledge of intellectual property laws, privacy laws, directives and regulations.
PsGetSid
PsGetSid is a tool that is used to query SIDs remotely. Using PsGetSid, the attacker can access the SIDs of user accounts and translate an SID into the user name. The command syntax for PsGetSid is as follows:
psgetsid [\\computer[,computer[,...] | @file] [-u username [-p password]]] [account|SID]
Some important information about the exam
The CISSP test measures the security professional’s knowledge and skills of Information security as well as safety and environmental issues. The CISSP curriculum covers a variety of Information Security topics. The examination is based on the (ISC)2 CISSP Common Body of Knowledge (or CBK).The CISSP test can be taken at any authorized Pearson VUE or Prometric testing facilities
TCP FIN scanning
TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored and the port will drop that packet. T