CISSP Security Architecture and Engineering Practice Test 4 — 15 Questions

Question 1

A security architect is designing a system for a government agency that requires strict confidentiality controls. Data must be classified at multiple levels (e.g., Top Secret, Secret, Confidential). Users at a lower classification should not be able to read data at a higher classification, and users at a higher classification should not be able to write data to a lower classification. Which security model enforces these rules?

Accepted Answer

Bell-LaPadula model. The Bell-LaPadula model is a state machine model focused on confidentiality. It enforces 'no read up' and 'no write down' to prevent unauthorized access to higher classification data and prevent downgrading of classified information.

Answer

Biba model

Answer

Clark-Wilson model

Answer

Brewer-Nash model

Question 2

A company is implementing an access control system where permissions are granted based on attributes such as user role, department, time of day, and device trust score. This approach allows for fine-grained policies that can adapt to context. Which access control model is being used?

Accepted Answer

ABAC (Attribute-Based Access Control). ABAC (Attribute-Based Access Control) uses attributes of the user, resource, and environment to determine access. It is more flexible than RBAC or MAC.

Answer

MAC (Mandatory Access Control)

Answer

DAC (Discretionary Access Control)

Answer

RBAC (Role-Based Access Control)

Question 3

A security engineer is evaluating a system that uses a Trusted Platform Module (TPM) for secure boot. The TPM measures the boot components and stores the measurements in Platform Configuration Registers (PCRs). Which of the following is a primary security goal achieved by this process?

Accepted Answer

Ensures the boot process has not been tampered with. Measured boot ensures that each boot component's hash is extended into PCRs. The TPM can attest these measurements to a remote verifier, proving the boot integrity.

Answer

Provides full disk encryption

Answer

Prevents all malware from executing

Answer

Authenticates the user during boot

Question 4

An organization is implementing a Public Key Infrastructure (PKI) to support secure email and web communications. The PKI includes a root CA, intermediate CAs, and end-entity certificates. Which of the following best describes the role of the root CA in this hierarchy?

Accepted Answer

It is self-signed and forms the trust anchor. The root CA is the top-level entity that signs its own certificate (self-signed) and issues certificates to intermediate CAs. It is the trust anchor for the entire PKI.

Answer

It performs key escrow for all users

Answer

It issues certificates directly to end users

Answer

It validates certificate revocation lists (CRLs)

Question 5

During a security audit, a vulnerability scanner reports a buffer overflow vulnerability in a legacy application. The application runs on a system with Data Execution Prevention (DEP/NX) enabled and Address Space Layout Randomization (ASLR) active. Which of the following is the most likely impact of these mitigations on a typical stack-based buffer overflow exploit?

Accepted Answer

They make it harder to execute arbitrary code via injected shellcode. DEP prevents code execution in data segments like the stack. ASLR randomizes memory addresses, making it harder for an attacker to redirect execution to injected code. Combined, they significantly raise the bar.

Answer

They only protect heap-based overflows, not stack-based

Answer

They completely prevent any exploitation of buffer overflows

Answer

They have no effect on buffer overflow exploits

Question 6

A security architect is designing a physical security perimeter for a data center. Which of the following is an example of Crime Prevention Through Environmental Design (CPTED) principle?

Accepted Answer

Designing the landscape to provide clear sightlines from the guard post. CPTED uses natural surveillance, access control, and territorial reinforcement. Clear sightlines allow monitoring and deter crime.

Answer

Using high fences with barbed wire around the facility

Answer

Deploying motion sensors and CCTV cameras

Answer

Installing biometric locks on all server room doors

Question 7

An organization is evaluating a Time-of-Check to Time-of-Use (TOCTOU) vulnerability in a file access routine. The routine checks if a user has permission to open a file, then later opens the file. Which of the following best describes the potential exploitation?

Accepted Answer

An attacker modifies the file after the permission check but before the open operation. A TOCTOU attack occurs when the resource state changes between the check and the use. For example, an attacker could replace the file after authorization but before open.

Answer

An attacker exploits a weak cryptographic algorithm

Answer

An attacker performs a buffer overflow to gain elevated privileges

Answer

An attacker intercepts the network traffic to steal credentials

Question 8

A security analyst is investigating a potential covert timing channel in a system. Which of the following characteristics best describes this type of channel?

Accepted Answer

It modulates the time between events to encode information. A covert timing channel uses the timing of events (e.g., response times) to transmit information, bypassing security controls.

Answer

It requires high bandwidth to be effective

Answer

It uses storage locations not normally accessible to the sender and receiver

Answer

It uses encryption to hide the content of the communication

Question 9

A cloud service provider uses a Type 1 hypervisor to host multiple virtual machines (VMs) for different customers. Which of the following is a primary security concern specific to this architecture?

Accepted Answer

Virtual machine escape from one guest to the hypervisor or other guests. A VM escape attack occurs when an attacker breaks out of a VM to access the hypervisor or other VMs. This is a critical risk in multi-tenant environments.

Answer

Inability to patch the hypervisor without downtime

Answer

Performance degradation due to resource sharing

Answer

Lack of support for legacy operating systems

Question 10

A security architect is designing a system that must ensure integrity of commercial transactions. Which of the following models are specifically focused on integrity? (Choose TWO)

Accepted Answer

Biba. Biba is an integrity model using no write up/no read down. Clark-Wilson is a commercial integrity model based on well-formed transactions and separation of duties.

Answer

Take-Grant

Answer

Brewer-Nash

Answer

Bell-LaPadula

Question 11

A security engineer is hardening a system against buffer overflow attacks. Which of the following are effective mitigations? (Choose THREE)

Accepted Answer

Address Space Layout Randomization (ASLR). ASLR randomizes memory addresses, DEP prevents code execution on the stack/heap, and stack canaries detect buffer overflows before control data is corrupted.

Answer

Using unpatched software

Answer

Disabling ASLR

Question 12

A company is implementing a PKI to support secure web browsing. Which of the following are commonly used to enhance the security of certificate validation? (Choose TWO)

Accepted Answer

OCSP stapling. OCSP stapling allows the server to present a timestamped OCSP response, reducing load on CA. Certificate pinning associates a host with a specific certificate or public key to prevent MITM attacks.

Answer

Certificate revocation lists (CRLs)

Answer

Self-signed root certificates

Answer

Wildcard certificates

Question 13

Which of the following are characteristics of a Trusted Execution Environment (TEE)? (Choose TWO)

Accepted Answer

It provides hardware-enforced isolation from the main OS. A TEE provides hardware-enforced isolation and a secure area for code execution, protecting sensitive data from the main OS.

Answer

It is only available in cloud environments

Answer

It runs as a separate virtual machine

Answer

It requires a TPM chip

Question 14

A security architect is evaluating physical security controls for a facility handling sensitive data. Which of the following are examples of layered physical security controls? (Choose THREE)

Accepted Answer

Perimeter fence. Layered security uses multiple barriers: perimeter (fence), external (lighting), building (locks), secure area (mantrap), and IT area (cage). Biometrics and guards are also layers.

Answer

Single-factor authentication for all doors

Answer

Unsecured windows on ground floor

Question 15

In the context of the Clark-Wilson integrity model, which of the following are key elements? (Choose TWO)

Accepted Answer

Constrained Data Items (CDIs). Clark-Wilson uses well-formed transactions (constrained data items) and separation of duties (transformation procedures and integrity verification procedures).

Answer

Simple Security Property

Answer

Lattice-based access control

Answer

No Write Up property