ISC Systems Security Engineering Foundations — All Questions With Answers

Question 1hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which engineering document should be created during the early stages of the system lifecycle to define the security-relevant mission goals and constraints?

Question 2mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of the NIST Cybersecurity Framework, which function is specifically supported by the 'Systems Security Engineering' process during the 'Identify' stage?

Question 3mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE of the following are considered 'Common Criteria' (ISO/IEC 15408) elements for evaluating the security functionality of a product?

Question 4mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

You are performing an audit of a new system's 'Trusted Computing Base' (TCB). Which observation would indicate a violation of the 'Separation of Duties' principle?

Question 5hardmulti select

Read the full Systems Security Engineering Foundations explanation →

When designing a system for 'High Integrity' (using the Biba model), which THREE rules must be enforced?

Question 6mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is performing requirements analysis for a new federal system. The system must be accredited under the RMF. The ISSE needs to ensure that security requirements are derived from the organization's mission and business needs, and that they are traceable throughout the lifecycle. Which document should the ISSE use as the primary source for control selection?

Question 7easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A security engineer is designing a system that must enforce the Bell-LaPadula model. The system processes data at multiple sensitivity levels and must prevent unauthorized disclosure. Which rule is fundamental to the Bell-LaPadula model?

Question 8mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the security requirements for a new command-and-control system. The program manager wants to know how the ISSE will ensure that the system's security controls are correct and complete before the system is fielded. Which activity should the ISSE use to provide this assurance?

Question 9easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is participating in a design review for a new system. The lead engineer proposes using a reference monitor concept to enforce access control. Which design property must the reference monitor satisfy to be effective?

Question 10hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a proposed architecture for a multi-level secure system that must prevent any information flow from a Secret enclave to an Unclassified enclave, even through covert channels. The design team proposes a reference monitor concept. Which property must the reference monitor guarantee to satisfy this mandatory flow restriction?

Question 11hardmulti select

Read the full Systems Security Engineering Foundations explanation →

When designing a secure system architecture, which TWO of the following are primary considerations for achieving the principle of 'Defense in Depth'?

Question 12mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

You are integrating security requirements into the Systems Engineering V-Model. At which stage should the Information Systems Security Engineer (ISSE) define the security functional requirements to ensure traceability to the system architecture?

Question 13hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An organization is adopting a DevSecOps model. To ensure security engineering principles are met, which tool should be integrated into the CI/CD pipeline to automate the detection of vulnerabilities in proprietary code during the 'Build' stage?

Question 14mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

During the 'Engineering Process Integration' phase, an ISSE identifies that the legacy system lacks support for modern TLS 1.3 encryption. What is the most appropriate engineering response?

Question 15mediummulti select

Read the full Systems Security Engineering Foundations explanation →

When applying NIST SP 800-160 Systems Security Engineering principles, which THREE activities are critical during the 'System Design' phase to ensure confidentiality and integrity?

Question 16mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When using the STRIDE threat modeling methodology, which security principle does 'Tampering' specifically attempt to violate?

Question 17easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of the System Development Life Cycle (SDLC), what is the primary purpose of a security control baseline?

Question 18easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary benefit of modularity in secure systems design?

Question 19mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When applying the principle of Least Privilege, which technical implementation is most effective in a microservices architecture?

Question 20easymulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE factors must be evaluated when determining if a system component is 'security-critical'?

Question 21mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which TWO items should be included in a 'Security Requirements Traceability Matrix' (SRTM) to ensure comprehensive engineering coverage?

Question 22hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When conducting a security assessment of a system's 'Trusted Computing Base' (TCB), what is the most important attribute to verify?

Question 23hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE activities are essential when conducting a 'Security Impact Analysis' for a proposed system change?

Question 24easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which security model is specifically designed to prevent the unauthorized flow of information from high-security levels to low-security levels (no read up, no write down)?

Question 25mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When integrating security into the requirements phase, what is the value of 'Misuse Cases'?

Question 26hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the systems engineering V-model, how does 'Verification' differ from 'Validation'?

Question 27mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which TWO of the following are valid methods for maintaining the integrity of system design documentation throughout the system lifecycle?

Question 28mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the 'Security Architecture' for an enterprise network. Which concept should be prioritized to ensure that an attacker who gains access to one segment cannot easily pivot to others?

Question 29easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which principle suggests that the security of a system should not depend on the secrecy of its design or implementation?

Question 30hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When engineering a cryptographically secure system, what is the primary risk associated with custom cryptographic implementations?

Question 31mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE are key components of a 'Secure Development Lifecycle' (SDL) process?

Question 32mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When designing high-availability systems, what is the primary security engineering concern regarding 'Fail-over' mechanisms?

Question 33easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary purpose of a 'Sanitization' process in the context of system decommissioning?

Question 34hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which TWO architectural patterns are considered best practices for securing cloud-native applications?

Question 35mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of the 'Common Criteria', what is the role of the 'Security Target'?

Question 36hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When evaluating a system's resilience to 'Supply Chain Attacks', what is the most important engineering practice to implement?

Question 37mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE activities are included in the 'Risk Management Framework' (RMF) step 'Assess'?

Question 38easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

When considering 'System Availability', what is the primary advantage of a 'Load Balancer' in a security engineering context?

Question 39easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which of the following is an example of an 'Administrative' security control?

Question 40mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary function of an 'API Gateway' in a microservices security architecture?

Question 41hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When designing for 'System Survivability', what is the most critical engineering principle to incorporate?

Question 42mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When configuring a 'Logging and Auditing' system, what is the most important consideration for 'Log Integrity'?

Question 43mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE items should be included in a thorough 'System Security Plan' (SSP)?

Question 44hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE security-relevant criteria should be assessed when evaluating a cloud service provider (CSP)?

Question 45easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary objective of a 'Security Design Review' early in the lifecycle?

Question 46mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When designing a system for 'Non-repudiation', which technical control is essential?

Question 47mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE of the following are valid 'Authentication' factors?

Question 48mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE factors are critical for an effective 'Continuous Monitoring' (ConMon) program?

Question 49hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of 'Systems Engineering', what does the term 'Security-Enforcing' mean regarding a system component?

Question 50easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary risk of a 'Privileged User' who lacks proper oversight?

Question 51mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

During a 'Design Review', an ISSE notices that the system architecture relies on 'Security through Obscurity'. Why is this considered an engineering flaw?

Question 52hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When engineering a 'Secure Boot' sequence, what is the primary security objective?

Question 53hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE components are necessary to define a complete 'Security Policy' for an enterprise system?

Question 54easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary advantage of 'Defense in Depth'?

Question 55mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a system architecture where the design team plans to mitigate a spoofing threat to an external interface by adding a digital signature to each message. During the design review, the ISSE notes that the signing key is stored in plaintext in the same configuration file as the application. Which security engineering principle is most directly violated by this design decision?

Question 56hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the protection profile for a new multi-level secure system that must enforce the Bell-LaPadula model. The design team asks which rules must be enforced to prevent unauthorized disclosure of classified information. (Choose two.)

Question 57easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A program manager asks the ISSE why the systems security engineering process should begin during the concept and requirements phase rather than after the design is complete. Which statement best explains the primary reason for early security engineering involvement?

Question 58mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

A defense contractor is engineering a command-and-control system that must enforce mandatory access control based on data sensitivity labels. The system must ensure that information never flows from a TOP SECRET object to an UNCLASSIFIED subject, even if the subject has legitimate access to other TOP SECRET data. Which security model should the ISSE specify as the foundation for the system's access control design?

Question 59mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is developing a security architecture for a new payroll processing system that handles PII and financial data. The system will be deployed on a private cloud and must comply with NIST SP 800-53 controls. The ISSE needs to ensure that the system's security requirements are traceable from initial stakeholder needs through design, implementation, and testing. Which systems security engineering activity best supports this traceability?

Question 60mediummultiple choice

Study the full virtualization explanation →

An ISSE is defining the boundary of a system under development and must document which components are inside the trusted computing base (TCB) versus outside it. The system includes a commercial hypervisor, guest virtual machines, a management console, and a hardware security module (HSM). Which criterion most directly determines whether a component belongs inside the TCB?

Question 61hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

During a security architecture review, the ISSE must evaluate the system's ability to enforce the -property (no write down) as defined in the Bell-LaPadula model. The system currently allows a process at the Secret level to write to an object at the Unclassified level. Which design change should the ISSE recommend to satisfy the -property?

Question 62easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A systems security engineer is selecting controls for a new federal information system and must ensure the design meets the minimum security requirements defined in NIST SP 800-53. Which concept describes the set of controls determined to be necessary to protect the system based on its security categorization?

Question 63mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is leading the initial security architecture for a new Department of Defense (DoD) command-and-control system. The program manager asks how the ISSE plans to address the risk of a single component failure cascading to a mission-critical function. Which engineering principle should the ISSE apply to reduce the likelihood that one component's failure causes a total loss of the security function?

Question 64easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

During early requirements definition for a new mission system, stakeholders agree that the system must remain effective even if several individual components are compromised. The ISSE must select a design principle that best supports this objective while keeping the architecture affordable. Which principle should be applied?

Question 65mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is leading the security design for a system that will process Controlled Unclassified Information (CUI). The system must comply with NIST SP 800-171. The ISSE needs to ensure that the design includes mechanisms to protect the confidentiality of CUI at rest and in transit. Which set of controls from SP 800-171 should the ISSE prioritize?

Question 66hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

A defense contractor is designing a multi-level security (MLS) system that must enforce mandatory access controls. The ISSE must select a model that prevents a subject with Top Secret clearance from writing data to a Secret-level object, even if the subject has legitimate access to both levels. Which security model directly enforces this no-write-down property?

Question 67hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

During a security architecture review, an ISSE observes that the design separates the trusted computing base into distinct, isolated modules with explicit interfaces, and that no module can access another's internal data structures directly. Which design principle is primarily being applied to limit the propagation of a compromise?

Question 68hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a commercial off-the-shelf (COTS) product for use in a system that processes classified information. The vendor claims the product is 'secure by design' but provides no formal evaluation. The ISSE must determine the level of assurance that can be placed in the product's security features. Which factor is most critical in assessing the product's assurance level?

Question 69hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a proposed architecture for a cross-domain transfer system. The design uses a reference monitor concept to mediate all access between security domains. During review, the ISSE must confirm the design satisfies the properties required of a reference monitor implementation. Which set of properties should the ISSE verify?

Question 70easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a design where the system's security relies on the assumption that attackers will not discover a proprietary communication protocol. The ISSE objects to this approach. Which principle is being violated?

Question 71hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a system architecture that uses a trusted path for security-critical operations. The developer proposes implementing the trusted path as a software-only mechanism within the general-purpose operating system. Which characteristic of a trusted path is most important for the ISSE to verify in this design?

Question 72mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

A systems security engineer is conducting a design review for a new web application that will handle sensitive customer data. The architecture includes a web server, application server, and database server. The engineer notices that the application server directly connects to the database using a hard-coded administrative account with full privileges. Which security principle is most directly violated by this design?

Question 73easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing the security architecture of a system that uses a layered defense strategy. The system includes firewalls, intrusion detection systems, and host-based antivirus. The ISSE wants to ensure that the compromise of a single component does not lead to a total system breach. Which principle is the ISSE applying?

Question 74mediummulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is drafting the security architecture description for a system that will undergo an assessment against the ISO/IEC 21827 (SSE-CMM) process areas. The assessor asks which work products demonstrate that the risk process area is being performed. Which TWO work products best provide that evidence? (Choose two.)

Question 75mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a proposed change to an accredited system that will introduce a new external interface. The change is classified as significant. According to the Risk Management Framework (RMF) process, which activity must the ISSE perform before the change can be approved?

Question 76hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the security requirements for a new system that will be developed using a systems security engineering approach. The ISSE must ensure that the requirements address the system's ability to protect against, detect, and respond to security incidents. Which TWO activities should the ISSE perform to derive these requirements? (Choose two.)

Question 77hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is tasked with evaluating the security architecture of a new system that will process top secret information. The system will use a combination of commercial and government-off-the-shelf components. The ISSE must ensure that the architecture supports the required security objectives. Which two security architecture principles are most critical to address when integrating COTS and GOTS components into a high-assurance system? (Choose two.)

Question 78hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the trustworthiness requirements for a new high-assurance system that will process classified information. The program manager asks which security engineering principles should be explicitly applied to the system architecture to ensure it can enforce its security policy under attack. (Choose two.)

Question 79mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

A systems security engineer is performing a functional decomposition of a new command-and-control system. The chief engineer insists that every allocated security control be traceable back to an approved stakeholder requirement before the preliminary design review. Which artifact should the ISSE produce to satisfy this demand?

Question 80hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is helping a program office plan a certification and accreditation effort for a system that will process controlled unclassified information. The program director wants to know how an assurance case differs from a traditional security test report. Which description best characterizes the purpose of an assurance case in this context?

Question 81hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a proposed architecture that uses a trusted computing base (TCB) to enforce security policy. The developer argues that because the TCB is small, it does not need to be evaluated against any protection profile. How should the ISSE respond?

Question 82mediummulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is developing a security architecture for a new system that must support multiple independent levels of security. The ISSE needs to ensure that the architecture enforces the principles of isolation and non-interference. Which two design techniques should the ISSE require? (Choose two.)

Question 83easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A program office is planning a new logistics system and the ISSE must determine which security engineering activities belong in the concept stage versus later stages. The chief engineer asks which activity should occur earliest, before any system requirements baseline is established. Which activity is most appropriate at that point?

Question 84mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a design that layers network segmentation, host-based firewalls, application input validation, and database encryption. A reviewer argues this duplication is wasteful and proposes collapsing to a single strong control. How should the ISSE justify the layered approach using established security engineering principles?

Question 85hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is leading a design review of a new identity management subsystem that must support separation of duties for administrative functions. The review board asks which design characteristics directly enforce separation of duties within the subsystem. (Choose two.)

Question 1hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which engineering document should be created during the early stages of the system lifecycle to define the security-relevant mission goals and constraints?

Question 2mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of the NIST Cybersecurity Framework, which function is specifically supported by the 'Systems Security Engineering' process during the 'Identify' stage?

Question 3mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE of the following are considered 'Common Criteria' (ISO/IEC 15408) elements for evaluating the security functionality of a product?

Question 4mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

You are performing an audit of a new system's 'Trusted Computing Base' (TCB). Which observation would indicate a violation of the 'Separation of Duties' principle?

Question 5hardmulti select

Read the full Systems Security Engineering Foundations explanation →

When designing a system for 'High Integrity' (using the Biba model), which THREE rules must be enforced?

Question 6mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is performing requirements analysis for a new federal system. The system must be accredited under the RMF. The ISSE needs to ensure that security requirements are derived from the organization's mission and business needs, and that they are traceable throughout the lifecycle. Which document should the ISSE use as the primary source for control selection?

Question 7easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A security engineer is designing a system that must enforce the Bell-LaPadula model. The system processes data at multiple sensitivity levels and must prevent unauthorized disclosure. Which rule is fundamental to the Bell-LaPadula model?

Question 8mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the security requirements for a new command-and-control system. The program manager wants to know how the ISSE will ensure that the system's security controls are correct and complete before the system is fielded. Which activity should the ISSE use to provide this assurance?

Question 9easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is participating in a design review for a new system. The lead engineer proposes using a reference monitor concept to enforce access control. Which design property must the reference monitor satisfy to be effective?

Question 10hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a proposed architecture for a multi-level secure system that must prevent any information flow from a Secret enclave to an Unclassified enclave, even through covert channels. The design team proposes a reference monitor concept. Which property must the reference monitor guarantee to satisfy this mandatory flow restriction?

Question 11hardmulti select

Read the full Systems Security Engineering Foundations explanation →

When designing a secure system architecture, which TWO of the following are primary considerations for achieving the principle of 'Defense in Depth'?

Question 12mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

You are integrating security requirements into the Systems Engineering V-Model. At which stage should the Information Systems Security Engineer (ISSE) define the security functional requirements to ensure traceability to the system architecture?

Question 13hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An organization is adopting a DevSecOps model. To ensure security engineering principles are met, which tool should be integrated into the CI/CD pipeline to automate the detection of vulnerabilities in proprietary code during the 'Build' stage?

Question 14mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

During the 'Engineering Process Integration' phase, an ISSE identifies that the legacy system lacks support for modern TLS 1.3 encryption. What is the most appropriate engineering response?

Question 15mediummulti select

Read the full Systems Security Engineering Foundations explanation →

When applying NIST SP 800-160 Systems Security Engineering principles, which THREE activities are critical during the 'System Design' phase to ensure confidentiality and integrity?

Question 16mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When using the STRIDE threat modeling methodology, which security principle does 'Tampering' specifically attempt to violate?

Question 17easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of the System Development Life Cycle (SDLC), what is the primary purpose of a security control baseline?

Question 18easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary benefit of modularity in secure systems design?

Question 19mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When applying the principle of Least Privilege, which technical implementation is most effective in a microservices architecture?

Question 20easymulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE factors must be evaluated when determining if a system component is 'security-critical'?

Question 21mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which TWO items should be included in a 'Security Requirements Traceability Matrix' (SRTM) to ensure comprehensive engineering coverage?

Question 22hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When conducting a security assessment of a system's 'Trusted Computing Base' (TCB), what is the most important attribute to verify?

Question 23hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE activities are essential when conducting a 'Security Impact Analysis' for a proposed system change?

Question 24easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which security model is specifically designed to prevent the unauthorized flow of information from high-security levels to low-security levels (no read up, no write down)?

Question 25mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When integrating security into the requirements phase, what is the value of 'Misuse Cases'?

Question 26hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the systems engineering V-model, how does 'Verification' differ from 'Validation'?

Question 27mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which TWO of the following are valid methods for maintaining the integrity of system design documentation throughout the system lifecycle?

Question 28mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the 'Security Architecture' for an enterprise network. Which concept should be prioritized to ensure that an attacker who gains access to one segment cannot easily pivot to others?

Question 29easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which principle suggests that the security of a system should not depend on the secrecy of its design or implementation?

Question 30hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When engineering a cryptographically secure system, what is the primary risk associated with custom cryptographic implementations?

Question 31mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE are key components of a 'Secure Development Lifecycle' (SDL) process?

Question 32mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When designing high-availability systems, what is the primary security engineering concern regarding 'Fail-over' mechanisms?

Question 33easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary purpose of a 'Sanitization' process in the context of system decommissioning?

Question 34hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which TWO architectural patterns are considered best practices for securing cloud-native applications?

Question 35mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of the 'Common Criteria', what is the role of the 'Security Target'?

Question 36hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When evaluating a system's resilience to 'Supply Chain Attacks', what is the most important engineering practice to implement?

Question 37mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE activities are included in the 'Risk Management Framework' (RMF) step 'Assess'?

Question 38easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

When considering 'System Availability', what is the primary advantage of a 'Load Balancer' in a security engineering context?

Question 39easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

Which of the following is an example of an 'Administrative' security control?

Question 40mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary function of an 'API Gateway' in a microservices security architecture?

Question 41hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When designing for 'System Survivability', what is the most critical engineering principle to incorporate?

Question 42mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When configuring a 'Logging and Auditing' system, what is the most important consideration for 'Log Integrity'?

Question 43mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE items should be included in a thorough 'System Security Plan' (SSP)?

Question 44hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE security-relevant criteria should be assessed when evaluating a cloud service provider (CSP)?

Question 45easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary objective of a 'Security Design Review' early in the lifecycle?

Question 46mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

When designing a system for 'Non-repudiation', which technical control is essential?

Question 47mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE of the following are valid 'Authentication' factors?

Question 48mediummulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE factors are critical for an effective 'Continuous Monitoring' (ConMon) program?

Question 49hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

In the context of 'Systems Engineering', what does the term 'Security-Enforcing' mean regarding a system component?

Question 50easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary risk of a 'Privileged User' who lacks proper oversight?

Question 51mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

During a 'Design Review', an ISSE notices that the system architecture relies on 'Security through Obscurity'. Why is this considered an engineering flaw?

Question 52hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

When engineering a 'Secure Boot' sequence, what is the primary security objective?

Question 53hardmulti select

Read the full Systems Security Engineering Foundations explanation →

Which THREE components are necessary to define a complete 'Security Policy' for an enterprise system?

Question 54easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

What is the primary advantage of 'Defense in Depth'?

Question 55mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a system architecture where the design team plans to mitigate a spoofing threat to an external interface by adding a digital signature to each message. During the design review, the ISSE notes that the signing key is stored in plaintext in the same configuration file as the application. Which security engineering principle is most directly violated by this design decision?

Question 56hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the protection profile for a new multi-level secure system that must enforce the Bell-LaPadula model. The design team asks which rules must be enforced to prevent unauthorized disclosure of classified information. (Choose two.)

Question 57easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A program manager asks the ISSE why the systems security engineering process should begin during the concept and requirements phase rather than after the design is complete. Which statement best explains the primary reason for early security engineering involvement?

Question 58mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

A defense contractor is engineering a command-and-control system that must enforce mandatory access control based on data sensitivity labels. The system must ensure that information never flows from a TOP SECRET object to an UNCLASSIFIED subject, even if the subject has legitimate access to other TOP SECRET data. Which security model should the ISSE specify as the foundation for the system's access control design?

Question 59mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is developing a security architecture for a new payroll processing system that handles PII and financial data. The system will be deployed on a private cloud and must comply with NIST SP 800-53 controls. The ISSE needs to ensure that the system's security requirements are traceable from initial stakeholder needs through design, implementation, and testing. Which systems security engineering activity best supports this traceability?

Question 60mediummultiple choice

Study the full virtualization explanation →

An ISSE is defining the boundary of a system under development and must document which components are inside the trusted computing base (TCB) versus outside it. The system includes a commercial hypervisor, guest virtual machines, a management console, and a hardware security module (HSM). Which criterion most directly determines whether a component belongs inside the TCB?

Question 61hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

During a security architecture review, the ISSE must evaluate the system's ability to enforce the -property (no write down) as defined in the Bell-LaPadula model. The system currently allows a process at the Secret level to write to an object at the Unclassified level. Which design change should the ISSE recommend to satisfy the -property?

Question 62easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A systems security engineer is selecting controls for a new federal information system and must ensure the design meets the minimum security requirements defined in NIST SP 800-53. Which concept describes the set of controls determined to be necessary to protect the system based on its security categorization?

Question 63mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is leading the initial security architecture for a new Department of Defense (DoD) command-and-control system. The program manager asks how the ISSE plans to address the risk of a single component failure cascading to a mission-critical function. Which engineering principle should the ISSE apply to reduce the likelihood that one component's failure causes a total loss of the security function?

Question 64easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

During early requirements definition for a new mission system, stakeholders agree that the system must remain effective even if several individual components are compromised. The ISSE must select a design principle that best supports this objective while keeping the architecture affordable. Which principle should be applied?

Question 65mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is leading the security design for a system that will process Controlled Unclassified Information (CUI). The system must comply with NIST SP 800-171. The ISSE needs to ensure that the design includes mechanisms to protect the confidentiality of CUI at rest and in transit. Which set of controls from SP 800-171 should the ISSE prioritize?

Question 66hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

A defense contractor is designing a multi-level security (MLS) system that must enforce mandatory access controls. The ISSE must select a model that prevents a subject with Top Secret clearance from writing data to a Secret-level object, even if the subject has legitimate access to both levels. Which security model directly enforces this no-write-down property?

Question 67hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

During a security architecture review, an ISSE observes that the design separates the trusted computing base into distinct, isolated modules with explicit interfaces, and that no module can access another's internal data structures directly. Which design principle is primarily being applied to limit the propagation of a compromise?

Question 68hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a commercial off-the-shelf (COTS) product for use in a system that processes classified information. The vendor claims the product is 'secure by design' but provides no formal evaluation. The ISSE must determine the level of assurance that can be placed in the product's security features. Which factor is most critical in assessing the product's assurance level?

Question 69hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a proposed architecture for a cross-domain transfer system. The design uses a reference monitor concept to mediate all access between security domains. During review, the ISSE must confirm the design satisfies the properties required of a reference monitor implementation. Which set of properties should the ISSE verify?

Question 70easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a design where the system's security relies on the assumption that attackers will not discover a proprietary communication protocol. The ISSE objects to this approach. Which principle is being violated?

Question 71hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a system architecture that uses a trusted path for security-critical operations. The developer proposes implementing the trusted path as a software-only mechanism within the general-purpose operating system. Which characteristic of a trusted path is most important for the ISSE to verify in this design?

Question 72mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

A systems security engineer is conducting a design review for a new web application that will handle sensitive customer data. The architecture includes a web server, application server, and database server. The engineer notices that the application server directly connects to the database using a hard-coded administrative account with full privileges. Which security principle is most directly violated by this design?

Question 73easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing the security architecture of a system that uses a layered defense strategy. The system includes firewalls, intrusion detection systems, and host-based antivirus. The ISSE wants to ensure that the compromise of a single component does not lead to a total system breach. Which principle is the ISSE applying?

Question 74mediummulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is drafting the security architecture description for a system that will undergo an assessment against the ISO/IEC 21827 (SSE-CMM) process areas. The assessor asks which work products demonstrate that the risk process area is being performed. Which TWO work products best provide that evidence? (Choose two.)

Question 75mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a proposed change to an accredited system that will introduce a new external interface. The change is classified as significant. According to the Risk Management Framework (RMF) process, which activity must the ISSE perform before the change can be approved?

Question 76hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the security requirements for a new system that will be developed using a systems security engineering approach. The ISSE must ensure that the requirements address the system's ability to protect against, detect, and respond to security incidents. Which TWO activities should the ISSE perform to derive these requirements? (Choose two.)

Question 77hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is tasked with evaluating the security architecture of a new system that will process top secret information. The system will use a combination of commercial and government-off-the-shelf components. The ISSE must ensure that the architecture supports the required security objectives. Which two security architecture principles are most critical to address when integrating COTS and GOTS components into a high-assurance system? (Choose two.)

Question 78hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is defining the trustworthiness requirements for a new high-assurance system that will process classified information. The program manager asks which security engineering principles should be explicitly applied to the system architecture to ensure it can enforce its security policy under attack. (Choose two.)

Question 79mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

A systems security engineer is performing a functional decomposition of a new command-and-control system. The chief engineer insists that every allocated security control be traceable back to an approved stakeholder requirement before the preliminary design review. Which artifact should the ISSE produce to satisfy this demand?

Question 80hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is helping a program office plan a certification and accreditation effort for a system that will process controlled unclassified information. The program director wants to know how an assurance case differs from a traditional security test report. Which description best characterizes the purpose of an assurance case in this context?

Question 81hardmultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is evaluating a proposed architecture that uses a trusted computing base (TCB) to enforce security policy. The developer argues that because the TCB is small, it does not need to be evaluated against any protection profile. How should the ISSE respond?

Question 82mediummulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is developing a security architecture for a new system that must support multiple independent levels of security. The ISSE needs to ensure that the architecture enforces the principles of isolation and non-interference. Which two design techniques should the ISSE require? (Choose two.)

Question 83easymultiple choice

Read the full Systems Security Engineering Foundations explanation →

A program office is planning a new logistics system and the ISSE must determine which security engineering activities belong in the concept stage versus later stages. The chief engineer asks which activity should occur earliest, before any system requirements baseline is established. Which activity is most appropriate at that point?

Question 84mediummultiple choice

Read the full Systems Security Engineering Foundations explanation →

An ISSE is reviewing a design that layers network segmentation, host-based firewalls, application input validation, and database encryption. A reviewer argues this duplication is wasteful and proposes collapsing to a single strong control. How should the ISSE justify the layered approach using established security engineering principles?

Question 85hardmulti select

Read the full Systems Security Engineering Foundations explanation →

An ISSE is leading a design review of a new identity management subsystem that must support separation of duties for administrative functions. The review board asks which design characteristics directly enforce separation of duties within the subsystem. (Choose two.)