When configuring AWS Security Groups for a multi-tier application architecture, an engineer must ensure that the web tier only communicates with the application tier on port 8080. Which configuration best adheres to the principle of Defense in Depth?
An ISSEP is conducting a gap analysis between a legacy system and ISO/IEC 27001 requirements. The system lacks automated audit logging. Which control implementation is most effective for meeting the 'Logging and Monitoring' requirements?
An ISSEP architect is designing a system under NIST SP 800-53 controls and needs to implement an automated mechanism to enforce the principle of least privilege for non-privileged accounts. Which configuration in an AWS environment best aligns with the 'AC-6' control requirement?
When mapping security requirements from ISO/IEC 27001 to a cloud-native architecture, you are configuring Azure Policy to ensure all newly created storage accounts have 'Secure transfer required' enabled. What is the most efficient way to achieve this enforcement?
You are conducting a threat modeling exercise using the STRIDE methodology. A specific service-to-service communication path lacks mutual TLS. Which STRIDE category does this vulnerability primarily fall under?
An ISSEP is leading the security engineering effort for a new Department of Defense (DoD) information system that will process Controlled Unclassified Information (CUI). The system owner requires that the system be assessed and authorized using the Risk Management Framework (RMF). The ISSEP must determine which set of controls to use as the basis for the security plan. Which document should the ISSEP use to select the security controls?
An ISSEP is defining the security requirements for a new cross-domain solution that will transfer data between a Secret enclave and an Unclassified enclave. The design must enforce a strict information flow policy. Which TWO mechanisms should the ISSEP specify to satisfy this requirement? (Choose two.)
An ISSEP is conducting a security architecture review for a system that will process Controlled Unclassified Information (CUI) in a cloud environment. The system must comply with NIST SP 800-171. The ISSEP needs to ensure that the cloud provider's shared responsibility model is properly addressed. Which TWO responsibilities remain with the organization under the shared responsibility model for IaaS? (Choose two.)
An ISSEP is developing a security architecture for a new system that will process Controlled Unclassified Information (CUI) for a federal agency. The system will be hosted in a commercial cloud environment. The agency requires compliance with NIST SP 800-171. Which TWO security requirements from NIST SP 800-171 are MOST directly related to protecting CUI at rest and in transit? (Choose two.)
An ISSEP is performing a security architecture review for a system that uses a service-oriented architecture (SOA). The system integrates multiple web services, some of which are exposed to external partners. The ISSEP must ensure that the architecture addresses the risk of injection attacks across service boundaries. Which design approach BEST mitigates this risk?
An ISSEP is working on a system that will be authorized under the NIST Risk Management Framework (RMF). The system owner asks when the Plan of Action and Milestones (POA&M) should be initially developed and what its primary purpose is. Which statement accurately describes the POA&M in the RMF process?
During the design of a PKI hierarchy for a highly classified system, the ISSEP needs to ensure that the Root CA is kept offline. What is the most appropriate way to sign the Subordinate CA request?
An ISSEP is evaluating the security of an API gateway. To implement OAuth 2.0 effectively, which flow should be recommended for a native mobile application?
A system is being designed to process PII. The requirement is to maintain data sovereignty while utilizing a hybrid cloud model. What architectural strategy best achieves this?
An ISSEP is designing a secure architecture for a cloud environment using NIST SP 800-160. Which architectural pattern should the engineer prioritize to ensure the principle of Least Privilege is enforced at the service-to-service communication layer within a Kubernetes cluster?
An ISSEP is designing a secure CI/CD pipeline. Which technique is most effective for preventing secrets (e.g., API keys) from being committed to the source code repository?
An ISSEP needs to secure inter-process communication (IPC) on a Linux host. Which feature should be configured to prevent unauthorized processes from accessing sensitive memory space?
You are assessing a system for compliance with FIPS 140-3. You need to ensure that the cryptographic module being used for TLS termination on a load balancer meets specific physical security requirements. Where should you look for the validation status of the cryptographic module?
An organization is migrating to a Zero Trust architecture as defined in NIST SP 800-207. Which component is responsible for evaluating the context of a request, such as device health and location, before granting access?
You are designing a secure microservices architecture. To meet the 'Data at Rest' security requirements, you decide to use envelope encryption. Which sequence correctly describes the flow of managing the Data Encryption Key (DEK)?
In the context of the NIST Risk Management Framework (RMF), which step involves the initial identification of security controls based on the system's impact level?
When architecting a system to meet ISO 27001 requirements for secure system engineering, which TWO of the following design principles should be prioritized for protecting sensitive data at rest?
An ISSEP professional is reviewing an architecture for compliance with NIST SP 800-160, Systems Security Engineering. Which THREE of the following activities are core to the 'Trustworthiness' objective for an engineered system?
You are designing an incident response architecture for a cloud environment. Which TWO of the following configurations are critical for ensuring effective forensic readiness according to NIST SP 800-61?
An ISSEP is leading the security engineering effort for a new federal system that will process Controlled Unclassified Information (CUI). The system owner wants to ensure that the system's security requirements are derived from a formal threat model and that the design mitigates identified threats before development begins. Which activity should the ISSEP perform FIRST to integrate security into the early stages of the system development life cycle?
An ISSEP is drafting the security architecture for a new federal financial system. The system will process moderate-impact data and must follow the NIST Risk Management Framework (RMF). The system owner asks which document provides the initial allocation of security controls to the system based on the security categorization. Which document should the ISSEP reference?
An ISSEP is drafting the initial security documentation for a new federal payroll system before any controls have been implemented. The authorizing official wants a document that records the system boundary, the security categorization, and the security controls selected from NIST SP 800-53 Rev. 5, and that will serve as the primary artifact supporting the authorization decision throughout the RMF. Which document should the ISSEP produce?
An ISSEP is developing the security architecture for a new federal system that will process Controlled Unclassified Information (CUI). The system owner wants to reuse an existing authorization package from a similar system to reduce costs. The ISSEP must ensure the reuse is valid under the NIST Risk Management Framework (RMF) and NIST SP 800-37 Rev. 2. Which action best supports this goal?
An ISSEP is designing a secure network architecture for a Department of Defense (DoD) system that must comply with the NIST Risk Management Framework (RMF) and DoD Instruction 8510.01. The system will use a demilitarized zone (DMZ) to host a public-facing web server. The ISSEP must ensure that the DMZ design follows the principle of least privilege and prevents direct access to the internal network. Which design approach best meets these requirements?
An ISSEP is designing a cross-domain solution (CDS) to allow data transfer between a high-assurance network and a low-assurance network. The solution must enforce a strict one-way flow of data and prevent any possibility of a covert channel back to the high side. Which architectural approach BEST satisfies this requirement?
An ISSEP is designing a secure network architecture for a defense contractor that must comply with NIST SP 800-171. The system will handle CUI and requires protection against advanced persistent threats (APTs). The ISSEP proposes using a demilitarized zone (DMZ) with firewalls and intrusion detection systems. Which additional architectural control is most critical to satisfy the NIST SP 800-171 requirement for boundary protection?
An ISSEP is designing a secure network architecture for a system that must support remote users accessing sensitive data. The system owner has mandated the use of a VPN to protect data in transit. The ISSEP must select a VPN protocol that provides confidentiality, integrity, and mutual authentication. Which protocol should the ISSEP choose?
You are an ISSEP leading the security architecture review for a new command-and-control system. The system will process classified information and must support defense in depth. The program manager asks which two principles are most critical to apply when defining the security architecture to ensure resilience against advanced persistent threats. (Choose two.)
An ISSEP is developing a security architecture for a system that will use a service-oriented architecture (SOA) with multiple web services. The system must ensure that messages are protected end-to-end and that services can verify the identity of the sender. Which TWO security standards or specifications should be incorporated into the architecture to meet these requirements? (Choose two.)
An ISSEP is leading the security engineering effort for a new cloud-based system that will process sensitive but unclassified information. The system must comply with FedRAMP Moderate baseline. The ISSEP is selecting security controls from NIST SP 800-53 Rev. 5. Which TWO controls are most appropriate to address the risk of unauthorized access to data at rest in the cloud environment? (Choose two.)
An ISSEP is leading the security engineering effort for a new Department of Defense information system that will process classified data at the Secret level. The system will be deployed on a shared enclave. The program manager asks which NIST publication should be used as the primary source for selecting and specifying security controls for this system.
An ISSEP is conducting a security architecture review for a system that will process classified information. The system owner wants to ensure that the architecture includes appropriate boundary defense mechanisms. The ISSEP must recommend controls that provide boundary defense. Which two controls should the ISSEP recommend? (Choose two.)
You are an ISSEP designing a cross-domain solution (CDS) that will allow data to flow from a low-assurance network to a high-assurance network. The security requirement is to ensure that only authorized data transfers occur and that the high side is protected from malicious content. Which architectural approach best meets this requirement?
An ISSEP is reviewing the security architecture of a system that uses a trusted platform module (TPM) for hardware root of trust. The system must ensure that the boot process is measured and that the integrity of the boot components can be verified remotely. Which TPM feature should be used to achieve this?
An ISSEP is designing a cross-domain solution (CDS) to allow data to flow from a Secret network to an Unclassified network. The CDS must enforce a strict one-way transfer with content filtering. Which security principle is MOST critical to verify during the design review to prevent data leakage from the higher classification to the lower?
You are an ISSEP for a defense contractor. The program uses a commercial cloud service to process controlled unclassified information (CUI). The government customer requires compliance with DFARS clause 252.204-7012 and NIST SP 800-171. The cloud provider offers a FedRAMP Moderate authorization. Which action must you take to ensure the cloud service meets the required security baseline?
An ISSEP is working on a system that must comply with the NIST Risk Management Framework (RMF). The system owner asks the ISSEP to explain the purpose of the 'Prepare' step in the RMF. Which statement best describes the goal of the Prepare step?
During the security architecture review of a new identity management system, the ISSEP must choose an authentication protocol that supports native single sign-on across organizational boundaries and carries signed assertions about the user so relying parties can make authorization decisions without contacting the identity provider on every request. Which protocol best meets these requirements?
An ISSEP is tasked with ensuring that a new information system complies with the organization's security requirements. The system will be deployed in a cloud environment and will process sensitive but unclassified data. The ISSEP must select an appropriate set of security controls and tailor them to the cloud deployment. Which NIST publication provides the security control catalog and guidance for tailoring controls?
An ISSEP is designing a system that will use a public key infrastructure (PKI) for authentication and encryption. The system owner is concerned about the security of the private keys used by the certificate authorities (CAs) and end entities. The ISSEP must recommend a key management strategy that protects private keys throughout their lifecycle. Which strategy should the ISSEP recommend?
An ISSEP is defining the security requirements for a new federal information system that will process Controlled Unclassified Information (CUI). The system owner mandates that the design must support continuous monitoring and near real-time risk determination. Which NIST publication should the ISSEP reference to implement the required continuous monitoring capabilities?
You are an ISSEP working on a system that uses a service-oriented architecture. The system must enforce access control decisions based on multiple attributes, including user role, clearance level, and time of day. The policy is centrally managed and may change dynamically. Which access control model best fits these requirements?
An ISSEP is designing a secure architecture for a system that will use a cloud-based service. The system must comply with the NIST Risk Management Framework (RMF) and the organization's security policy. The ISSEP must ensure that the cloud provider's security controls are assessed and that the organization retains the ability to authorize the system. Which approach best meets these requirements?
An ISSEP is reviewing the supply chain risk for a system that will embed a commercial off-the-shelf cryptographic module. The program requires assurance that the module's cryptographic functions were independently tested against a published standard and that the module's security features are documented against a recognized protection profile. Which artifact should the ISSEP require from the vendor?
An ISSEP is reviewing the security architecture for a system that will handle law enforcement sensitive data. The system owner wants to ensure that the design supports the concept of least privilege and separation of duties. Which security engineering principle should the ISSEP apply to enforce these requirements at the architectural level?
An ISSEP is planning the security architecture for a system that will be operated in a facility shared with other tenants. The design must protect against an attacker who gains physical access to the shared space and attempts to capture electromagnetic emanations from the system's displays and cables. Which countermeasure should the ISSEP specify?
An ISSEP is tasked with designing a security architecture for a system that must comply with the NIST RMF. During the architecture definition, the ISSEP needs to ensure that the system can be authorized to operate. Which activity should be performed to provide the necessary evidence for the authorization decision?
An ISSEP is designing a cross-domain solution (CDS) to allow a high-assurance system to transfer data to a low-assurance system. The CDS must enforce data flow policies and prevent leakage of sensitive information. Which security engineering approach should the ISSEP implement to meet these requirements?
An ISSEP is developing the security architecture for a new system that will be deployed in a cloud environment. The system must comply with the NIST RMF and leverage cloud-specific security features. Which TWO considerations should the ISSEP address when defining the security architecture? (Choose two.)