CISSP Security Architecture and Engineering — 15 Questions

Question 1

A security architect is designing a system for a military intelligence agency where data classification labels (Top Secret, Secret, Confidential, Unclassified) are mandatory. Users are cleared to a specific level and must not read data above their clearance. Which security model enforces this type of access control?

Accepted Answer

Bell-LaPadula model. Bell-LaPadula focuses on confidentiality and enforces no read up (simple security property) and no write down (*-property), matching the scenario's need to prevent reading higher classified data.

Answer

Biba model

Answer

Brewer-Nash model

Answer

Clark-Wilson model

Question 2

A financial application requires strict integrity controls to prevent unauthorized modifications. The security team implements a model where users cannot write data to higher integrity levels (no write up) and cannot read data from lower integrity levels (no read down). Which model is being applied?

Accepted Answer

Biba. Biba model enforces integrity: no write up (subjects cannot write to higher integrity objects) and no read down (subjects cannot read lower integrity data).

Answer

Bell-LaPadula

Answer

Graham-Denning

Answer

Clark-Wilson

Question 3

Which access control model allows data owners to grant or revoke access to resources they own, typically implemented using ACLs?

Accepted Answer

DAC. DAC (Discretionary Access Control) enables owners to control access to their resources, commonly via ACLs.

Answer

MAC

Answer

RBAC

Answer

ABAC

Question 4

A security architect is selecting a cryptographic algorithm for encrypting data at rest in a backup system. The system requires strong security with a block cipher, and the organization mandates using a NIST-approved algorithm with key sizes of 128, 192, or 256 bits. Which algorithm should be selected?

Accepted Answer

AES. AES is a NIST-approved symmetric block cipher supporting 128, 192, and 256-bit keys. It is the standard for data at rest encryption.

Answer

RC4

Answer

RSA

Answer

3DES

Question 5

An organization is implementing a PKI for internal use. To ensure that certificate revocation status is checked in real-time without relying on periodic CRL downloads, which mechanism should be used?

Accepted Answer

OCSP stapling. OCSP stapling allows the server to present a time-stamped OCSP response during the TLS handshake, providing real-time revocation status without the client needing to contact the CA.

Answer

CT logs

Answer

Certificate pinning

Answer

CRL distribution points

Question 6

A security engineer is analyzing a vulnerability where an attacker can cause a buffer overflow on the stack. Which mitigation technique randomizes memory addresses to make it harder for the attacker to predict the location of shellcode or return addresses?

Accepted Answer

ASLR. ASLR (Address Space Layout Randomization) randomizes the base addresses of stack, heap, and libraries, making it difficult for an attacker to guess memory addresses.

Answer

SafeSEH

Answer

Stack canaries

Answer

DEP/NX bit

Question 7

Which of the following is a primary function of a Trusted Platform Module (TPM)?

Accepted Answer

Storing cryptographic keys securely. A TPM provides hardware-based secure storage for cryptographic keys, enabling secure boot and remote attestation.

Answer

Encrypting network traffic

Answer

Providing antivirus protection

Answer

Enforcing access control policies

Question 8

A security architect is evaluating hypervisor security for a multi-tenant cloud environment. Which type of hypervisor is considered more secure because it runs directly on the hardware without a host operating system, reducing the attack surface?

Accepted Answer

Type 1 hypervisor. Type 1 hypervisors (bare-metal) run directly on hardware, eliminating the OS layer that could be exploited. Examples: VMware ESXi, Hyper-V.

Answer

Virtual machine monitor

Answer

Containers

Answer

Type 2 hypervisor

Question 9

Which physical security design principle emphasizes that the physical environment should be designed to discourage criminal activity by using natural surveillance, access control, and territorial reinforcement?

Accepted Answer

CPTED. CPTED (Crime Prevention Through Environmental Design) uses architectural features to reduce crime.

Answer

TEMPEST

Answer

Fail-safe

Answer

Layered defense

Question 10

A security analyst discovers that an application allows a user to read a file they just wrote before the file's integrity is verified, due to a gap between the time of check and time of use. This is an example of which vulnerability?

Accepted Answer

TOCTOU. TOCTOU (Time of Check to Time of Use) is a race condition where a resource is checked and then used, but the state changes in between.

Answer

Covert channel

Answer

Buffer overflow

Answer

Side-channel attack

Question 11

A security architect is designing a system that must prevent conflicts of interest when a consultant works for two competing clients. Which security model ensures that the consultant cannot access data from one client if they have already accessed data from the other?

Accepted Answer

Brewer-Nash. Brewer-Nash (Chinese Wall) model prevents conflict of interest by dynamically adjusting access based on previously accessed datasets.

Answer

Clark-Wilson

Answer

Biba

Answer

Bell-LaPadula

Question 12

Which component of a trusted computing base (TCB) implements the reference monitor concept by enforcing access control decisions for all subjects and objects in the system?

Accepted Answer

Security kernel. The security kernel is the part of the TCB that implements the reference monitor, mediating all access requests.

Answer

Trusted platform module

Answer

Trusted computing base

Answer

Reference monitor

Question 13

A security architect is evaluating access control models for a healthcare system where users have specific roles (e.g., doctor, nurse, admin) and permissions are assigned based on those roles. However, the architect also wants to incorporate attributes such as time of day, patient consent status, and device type. Which TWO models should be combined to meet these requirements?

Accepted Answer

ABAC. RBAC provides role-based permissions, while ABAC adds flexibility with attributes. Combining them allows fine-grained control.

Answer

Clark-Wilson

Answer

MAC

Answer

DAC

Question 14

A security engineer is investigating a covert channel in a system. Which TWO types of covert channels could be used to leak information from a high-security to a low-security process?

Accepted Answer

Covert timing channel. Covert timing channels modulate the timing of events to signal information. Covert storage channels write data to a shared resource that the other process can read.

Answer

TOCTOU

Answer

Emanations

Answer

Side-channel

Question 15

An organization is implementing a defense-in-depth strategy for a data center. Which THREE of the following are examples of physical security controls that align with layered defense?

Accepted Answer

Card reader at building entrance. Layered physical security includes perimeter fencing, building access controls (e.g., card readers), and internal secure areas (e.g., server cages).

Answer

Antivirus software

Answer

Intrusion detection system on the network