THE LIST BELOW IS A PARTIAL LIST. FOR A FULL LIST SEE: https://www.cccure.org/ftopicp-33114.html#33114
CISSP All-In-One 4th Edition Errata
Chapter 3
Pg 97
In the table 3-4 Annual Loss Expectancy (ALE)
Should be changed to…
Annualized Loss Expectancy (ALE)
Chapter 4
Pg 188
SecureID needs to be changed to SecurID in two places within the box.
Chapter 5
Pg 294
If this does not happen properly, a deadlock situation may occur or a computer may not have enough resources to process other requests (resulting in a denial of service). A deadlock situation may occur when each process in a set of processes is waiting for an event to take place and that event can only be caused by another process in the set. Because each process is waiting for its required event, none of the processes will carry out their events—so the processes just sit there staring at each other.
Should be changed to…
If this does not happen properly, the system may run out of critical recourses (i.e. memory).
Pg 294
One example of a deadlock situation is when process A commits resource 1 and
needs to use resource 2 to properly coplete its task,
Should be changed to…
“Another situation to be concern about is a software deadlock. One example of a deadlock situation is when process A commits resource 1 and needs to use resource 2 to properly complete its task,
Chapter 6
Pg 436
Use three-prong connections or adapters if using two-prong cables.
Should be changed to “Use three-prong connections or adapters if using two-prong connections.”
Chapter 8
Pg 710
6. The private key = d.
Should be changed to…
“6. The private key = (n,d)
Pg 711
When a user encrypts a message with a public key, this message is encoded with a one-way function (breaking a glass). This function supplies a trapdoor (knowledge of how to put the glass back together), but the only way the trapdoor can be taken advantage of is if it is known about and the correct code is applied. The private key provides this service. The private key knows about the trapdoor, knows how to derive the original prime numbers, and has the necessary programming code to take advantage of this secret trapdoor to unlock the encoded message (reassembling the broken glass). Knowing about the trapdoor and having the correct functionality to take advantage of it are
what make the private key private.
Should be changed to…
When a user encrypts a message, the encryption process uses a one-way function (breaking a glass). This function supplies a trapdoor (knowledge of
how to put the glass back together), but the only way the trapdoor can be taken advantage of is if it is known about and the correct code is applied. The private or public key can provide this service. The keys know about the trapdoor, know how to derive the original prime numbers, and has the necessary programming code to take advantage of this secret trapdoor to unlock the encoded message (reassembling the broken glass). Knowing about the trapdoor and having the correct functionality to take advantage of it is what asymmetric algorithms are based on.
Chapter 9
Question 14 – Answer A. Project initiation, strategy development, business impact analysis, plan development, implementation, testing, and maintenance
Should be changed to …
Question 14 – Answer A. Project initiation, business impact analysis, recovery strategies plan development, implementation, testing, and maintenance
Chapter 12
Pg 1034
“Examples of life-cycle assurance standards are design specifications, clipping-level configurations…”
Needs to be changed to…
“Examples of life-cycle assurance standards are design specifications, …”
Pg 1061
“The write performance is not affected, but the read performance is increased dramatically because more than one head is retrieving data at the same time.”
Needs to be changed to…
“The write and read operations’ performance are increased dramatically because more than one head is either retrieving data or writing data at the same time.”
Pg 1081
“…65,535 TCP and 65,535 UDP ports. The first 1024 are said to be well-known ports. This means that a specific port number under 1025 is usually mapped to a well-known and used protocol.”
Needs to be changed to “…65,536 TCP and 65,536 UDP ports. The first 1024 (0-1023) are said to be well-known ports. This means that a specific port number under 1024 is usually mapped to a well-known and used protocol.”
Pg 1085
“John the Ripper is an example of a sniffer and password cracker…” needs to be changed to “John the Ripper is an example of a password cracker…”
Main Library Area 
COBIT© Standard 
CIsA -Dec 2011- post your results here!
