ISC Systems Security Engineering Foundations Practice Test 2 — 15 Questions

Question 1

When using the STRIDE threat modeling methodology, which security principle does 'Tampering' specifically attempt to violate?

Accepted Answer

Integrity. Tampering threats target the Integrity aspect of the CIA triad by attempting to modify data or system configurations.

Answer

Confidentiality

Answer

Availability

Answer

Non-repudiation

Question 2

In the context of the System Development Life Cycle (SDLC), what is the primary purpose of a security control baseline?

Accepted Answer

To define the minimum security requirements for a system category. A baseline establishes the minimum set of security controls required to protect the system based on its impact level.

Answer

To replace the need for a risk assessment

Answer

To audit employee performance

Answer

To automate the deployment of security patches

Question 3

What is the primary benefit of modularity in secure systems design?

Accepted Answer

Facilitates security analysis and component isolation. Modularity allows for fault isolation and easier security verification of individual components.

Answer

Reduces the total number of lines of code

Answer

Eliminates the need for API gateways

Answer

Guarantees the system cannot be hacked

Question 4

When applying the principle of Least Privilege, which technical implementation is most effective in a microservices architecture?

Accepted Answer

Attribute-Based Access Control (ABAC). ABAC evaluates access decisions dynamically against attributes of the subject, resource, action, and environment (e.g., user department, data classification, time of day, request origin). In a microservices architecture, where hundreds of services call each other with varying contexts and fine-grained data scopes, ABAC's policy-driven, context-aware model enforces least privilege far more precisely than static role assignments. This granularity is essential when roles proliferate across services and environments.

Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Question 5

Which THREE factors must be evaluated when determining if a system component is 'security-critical'?

Accepted Answer

Its role in processing sensitive information. Security-critical components are those that enforce policy, handle sensitive data, or provide security functions.

Answer

Its location in the physical facility

Answer

Its cost of procurement

Question 6

Which TWO items should be included in a 'Security Requirements Traceability Matrix' (SRTM) to ensure comprehensive engineering coverage?

Accepted Answer

The corresponding system component or design element. An SRTM maps requirements to design elements and test cases to ensure no security requirement is overlooked.

Answer

The vendor contact information

Answer

The employee performance review score

Answer

The marketing department's sales forecast

Question 7

When conducting a security assessment of a system's 'Trusted Computing Base' (TCB), what is the most important attribute to verify?

Accepted Answer

Verifiability of security functions. The TCB is the set of all hardware, software, and firmware components that are critical to the security of the system; it must be verifiable and correct.

Answer

System performance metrics

Answer

User-friendliness of the interface

Answer

The versioning history of the software

Question 8

Which THREE activities are essential when conducting a 'Security Impact Analysis' for a proposed system change?

Accepted Answer

Reviewing existing security controls for degradation. Impact analysis evaluates how changes affect existing controls, risk profiles, and system integrity.

Answer

Replacing all hardware in the data center

Answer

Renaming the system server hostname

Question 9

Which security model is specifically designed to prevent the unauthorized flow of information from high-security levels to low-security levels (no read up, no write down)?

Accepted Answer

Bell-LaPadula model. The Bell-LaPadula model focuses on confidentiality by enforcing the 'no read up, no write down' rules.

Answer

Clark-Wilson model

Answer

Biba model

Answer

Brewer-Nash model

Question 10

When integrating security into the requirements phase, what is the value of 'Misuse Cases'?

Accepted Answer

They provide insights into potential system threats. Misuse cases define what a malicious actor might try to do to the system, helping to derive security requirements.

Answer

They automate the generation of firewall rules

Answer

They replace the need for unit testing

Answer

They track the progress of development sprints

Question 11

In the systems engineering V-model, how does 'Verification' differ from 'Validation'?

Accepted Answer

Verification confirms the system meets specifications; Validation confirms it meets mission goals. Verification ensures the system is built correctly (conformance to requirements), while validation ensures the correct system is built (meeting user needs).

Answer

Verification is for security; Validation is for performance

Answer

Verification is done by vendors, Validation by end-users

Answer

Verification is for software, Validation is for hardware

Question 12

Which TWO of the following are valid methods for maintaining the integrity of system design documentation throughout the system lifecycle?

Accepted Answer

Version control systems (e.g., Git). Documentation must be version-controlled and subject to strict change management to remain accurate.

Answer

Relying on verbal updates from team members

Answer

Posting documents on a public forum

Answer

Periodic manual document destruction

Question 13

An ISSE is defining the 'Security Architecture' for an enterprise network. Which concept should be prioritized to ensure that an attacker who gains access to one segment cannot easily pivot to others?

Accepted Answer

Network segmentation. Network segmentation and compartmentalization are essential for preventing lateral movement.

Answer

Unified authentication store

Answer

Centralized logging

Answer

Flat network topology

Question 14

Which principle suggests that the security of a system should not depend on the secrecy of its design or implementation?

Accepted Answer

Kerckhoffs's Principle. Kerckhoffs's Principle (or Shannon's Maxim) states that a system should be secure even if everything about it is known, except for the keys.

Answer

Fail-safe defaults

Answer

Security through obscurity

Answer

Least privilege

Question 15

When engineering a cryptographically secure system, what is the primary risk associated with custom cryptographic implementations?

Accepted Answer

It lacks the rigorous peer review of standard algorithms. Custom cryptography is prone to subtle implementation errors that are difficult to detect and often break the security of the underlying algorithm.

Answer

It makes key management too difficult

Answer

It is always too slow for real-time systems

Answer

It requires special hardware