Security Planning And Engineering

Which THREE actions should be taken when decommissioning an information system to ensure data security?

Which THREE factors are essential when performing a threat model using the STRIDE methodology?

An ISSEP is designing a system that will use a public key infrastructure (PKI) for authentication and encryption. The system owner is concerned about the security of the private keys used by the certificate authorities (CAs) and end entities. The ISSEP must recommend a key management strategy that protects private keys throughout their lifecycle. Which strategy should the ISSEP recommend?

An ISSEP is designing a cross-domain solution (CDS) to allow data transfer between a high-assurance network and a low-assurance network. The solution must enforce a strict one-way flow of data and prevent any possibility of a covert channel back to the high side. Which architectural approach BEST satisfies this requirement?

Which TWO security standards are most relevant for an ISSEP designing a secure payment processing system?

An ISSEP is reviewing the security architecture for a system that will handle law enforcement sensitive data. The system owner wants to ensure that the design supports the concept of least privilege and separation of duties. Which security engineering principle should the ISSEP apply to enforce these requirements at the architectural level?

When applying NIST SP 800-53 controls to a new information system, which step occurs immediately after the 'Categorize' process in the RMF?

An ISSEP is conducting a security architecture review for a system that will process classified information. The system owner wants to ensure that the architecture includes appropriate boundary defense mechanisms. The ISSEP must recommend controls that provide boundary defense. Which two controls should the ISSEP recommend? (Choose two.)

An ISSEP is designing a secure architecture for a system that will use a cloud-based service. The system must comply with the NIST Risk Management Framework (RMF) and the organization's security policy. The ISSEP must ensure that the cloud provider's security controls are assessed and that the organization retains the ability to authorize the system. Which approach best meets these requirements?

Which TWO items should be included in a system's security architecture documentation?

During a system migration, you need to ensure integrity of transferred data. What is the best cryptographic method?

An ISSEP is designing a cross-domain solution (CDS) to allow data to flow from a Secret network to an Unclassified network. The CDS must enforce a strict one-way transfer with content filtering. Which security principle is MOST critical to verify during the design review to prevent data leakage from the higher classification to the lower?

When architecting a system to meet ISO 27001 requirements for secure system engineering, which TWO of the following design principles should be prioritized for protecting sensitive data at rest?

An ISSEP is evaluating the security of an API gateway. To implement OAuth 2.0 effectively, which flow should be recommended for a native mobile application?

An ISSEP is designing a secure network architecture for a defense contractor that must comply with NIST SP 800-171. The system will handle CUI and requires protection against advanced persistent threats (APTs). The ISSEP proposes using a demilitarized zone (DMZ) with firewalls and intrusion detection systems. Which additional architectural control is most critical to satisfy the NIST SP 800-171 requirement for boundary protection?

You are designing an incident response architecture for a cloud environment. Which TWO of the following configurations are critical for ensuring effective forensic readiness according to NIST SP 800-61?

An ISSEP is designing a secure storage solution for a database. To ensure data integrity, which mechanism is most reliable?

You are an ISSEP leading the security architecture review for a new command-and-control system. The system will process classified information and must support defense in depth. The program manager asks which two principles are most critical to apply when defining the security architecture to ensure resilience against advanced persistent threats. (Choose two.)

Which TWO of the following are considered critical components of a Secure Software Development Life Cycle (SDLC)?

What is the correct order of operations when handling a vulnerability in a production system according to the RMF?

An ISSEP is drafting the initial security documentation for a new federal payroll system before any controls have been implemented. The authorizing official wants a document that records the system boundary, the security categorization, and the security controls selected from NIST SP 800-53 Rev. 5, and that will serve as the primary artifact supporting the authorization decision throughout the RMF. Which document should the ISSEP produce?

You are designing a secure data enclave for highly sensitive research data. What is the most robust method to enforce physical and logical separation?

An ISSEP is developing the security architecture for a new system that will be deployed in a cloud environment. The system must comply with the NIST RMF and leverage cloud-specific security features. Which TWO considerations should the ISSEP address when defining the security architecture? (Choose two.)

During the design of a PKI hierarchy for a highly classified system, the ISSEP needs to ensure that the Root CA is kept offline. What is the most appropriate way to sign the Subordinate CA request?

Which document is used to track and manage vulnerabilities identified during the assessment phase of the RMF?

An ISSEP is leading the security engineering effort for a new federal system that will process Controlled Unclassified Information (CUI). The system owner wants to ensure that the system's security requirements are derived from a formal threat model and that the design mitigates identified threats before development begins. Which activity should the ISSEP perform FIRST to integrate security into the early stages of the system development life cycle?

An ISSEP is designing a secure CI/CD pipeline. Which technique is most effective for preventing secrets (e.g., API keys) from being committed to the source code repository?

An ISSEP is working on a system that must comply with the NIST Risk Management Framework (RMF). The system owner asks the ISSEP to explain the purpose of the 'Prepare' step in the RMF. Which statement best describes the goal of the Prepare step?

An ISSEP is developing the security architecture for a new federal system that will process Controlled Unclassified Information (CUI). The system owner wants to reuse an existing authorization package from a similar system to reduce costs. The ISSEP must ensure the reuse is valid under the NIST Risk Management Framework (RMF) and NIST SP 800-37 Rev. 2. Which action best supports this goal?

In a cloud environment, you must ensure that VM snapshots are encrypted. What is the most effective approach?

An ISSEP is leading the security engineering effort for a new Department of Defense information system that will process classified data at the Secret level. The system will be deployed on a shared enclave. The program manager asks which NIST publication should be used as the primary source for selecting and specifying security controls for this system.

An ISSEP needs to secure inter-process communication (IPC) on a Linux host. Which feature should be configured to prevent unauthorized processes from accessing sensitive memory space?

An ISSEP is configuring a WAF to mitigate OWASP Top 10 risks. Which configuration best addresses the 'Injection' category?

An ISSEP is planning the security architecture for a system that will be operated in a facility shared with other tenants. The design must protect against an attacker who gains physical access to the shared space and attempts to capture electromagnetic emanations from the system's displays and cables. Which countermeasure should the ISSEP specify?

When selecting controls for a system in a high-compliance environment, what is the best practice for tailoring?

Which THREE items are required to verify the integrity of a downloaded software package?

An ISSEP is leading the security engineering effort for a new cloud-based system that will process sensitive but unclassified information. The system must comply with FedRAMP Moderate baseline. The ISSEP is selecting security controls from NIST SP 800-53 Rev. 5. Which TWO controls are most appropriate to address the risk of unauthorized access to data at rest in the cloud environment? (Choose two.)

An ISSEP is drafting the security architecture for a new federal financial system. The system will process moderate-impact data and must follow the NIST Risk Management Framework (RMF). The system owner asks which document provides the initial allocation of security controls to the system based on the security categorization. Which document should the ISSEP reference?

You are designing a secure microservices architecture. To meet the 'Data at Rest' security requirements, you decide to use envelope encryption. Which sequence correctly describes the flow of managing the Data Encryption Key (DEK)?

An organization is migrating to a Zero Trust architecture as defined in NIST SP 800-207. Which component is responsible for evaluating the context of a request, such as device health and location, before granting access?

A system is being designed to process PII. The requirement is to maintain data sovereignty while utilizing a hybrid cloud model. What architectural strategy best achieves this?

When designing an information system architecture, what is the primary role of a System Security Plan (SSP)?

During the security architecture review of a new identity management system, the ISSEP must choose an authentication protocol that supports native single sign-on across organizational boundaries and carries signed assertions about the user so relying parties can make authorization decisions without contacting the identity provider on every request. Which protocol best meets these requirements?

An ISSEP must secure a server-to-server connection that currently uses plaintext LDAP. What is the recommended secure alternative?

You are an ISSEP for a defense contractor. The program uses a commercial cloud service to process controlled unclassified information (CUI). The government customer requires compliance with DFARS clause 252.204-7012 and NIST SP 800-171. The cloud provider offers a FedRAMP Moderate authorization. Which action must you take to ensure the cloud service meets the required security baseline?

Which TWO methods are effective for managing cryptographic keys in a cloud architecture?

An ISSEP is designing a secure architecture for a cloud environment using NIST SP 800-160. Which architectural pattern should the engineer prioritize to ensure the principle of Least Privilege is enforced at the service-to-service communication layer within a Kubernetes cluster?

An ISSEP is architecting a secure API environment. Which strategy is most effective for throttling and preventing resource exhaustion?

An ISSEP is reviewing the security architecture of a system that uses a trusted platform module (TPM) for hardware root of trust. The system must ensure that the boot process is measured and that the integrity of the boot components can be verified remotely. Which TPM feature should be used to achieve this?

You are an ISSEP working on a system that uses a service-oriented architecture. The system must enforce access control decisions based on multiple attributes, including user role, clearance level, and time of day. The policy is centrally managed and may change dynamically. Which access control model best fits these requirements?

An ISSEP is tasked with designing a security architecture for a system that must comply with the NIST RMF. During the architecture definition, the ISSEP needs to ensure that the system can be authorized to operate. Which activity should be performed to provide the necessary evidence for the authorization decision?

When designing for high availability and security, what is the best use of a Load Balancer (LB) from a security perspective?

An ISSEP is reviewing the supply chain risk for a system that will embed a commercial off-the-shelf cryptographic module. The program requires assurance that the module's cryptographic functions were independently tested against a published standard and that the module's security features are documented against a recognized protection profile. Which artifact should the ISSEP require from the vendor?

An ISSEP is tasked with securing an internal web application. Which headers should be implemented to prevent clickjacking?

What is the primary objective of the 'Assessment' phase in the NIST RMF?

Which THREE elements are required in a high-security access control policy?

When implementing FIPS 140-2/-3 validated cryptography in a system, what is the most important factor to verify?

An ISSEP is tasked with ensuring that a new information system complies with the organization's security requirements. The system will be deployed in a cloud environment and will process sensitive but unclassified data. The ISSEP must select an appropriate set of security controls and tailor them to the cloud deployment. Which NIST publication provides the security control catalog and guidance for tailoring controls?

An ISSEP professional is reviewing an architecture for compliance with NIST SP 800-160, Systems Security Engineering. Which THREE of the following activities are core to the 'Trustworthiness' objective for an engineered system?

What is the primary goal of the 'Authorization' phase in the NIST RMF?

An organization is adopting ISO 27001. Which document is required to justify the inclusion or exclusion of specific controls?

An ISSEP is designing a secure network architecture for a system that must support remote users accessing sensitive data. The system owner has mandated the use of a VPN to protect data in transit. The ISSEP must select a VPN protocol that provides confidentiality, integrity, and mutual authentication. Which protocol should the ISSEP choose?

In a Zero Trust architecture, what is the most critical function of a Policy Decision Point (PDP)?

Which THREE of the following are necessary to successfully implement Zero Trust in an existing enterprise environment?

An ISSEP is designing a secure network architecture for a Department of Defense (DoD) system that must comply with the NIST Risk Management Framework (RMF) and DoD Instruction 8510.01. The system will use a demilitarized zone (DMZ) to host a public-facing web server. The ISSEP must ensure that the DMZ design follows the principle of least privilege and prevents direct access to the internal network. Which design approach best meets these requirements?

You are an ISSEP designing a cross-domain solution (CDS) that will allow data to flow from a low-assurance network to a high-assurance network. The security requirement is to ensure that only authorized data transfers occur and that the high side is protected from malicious content. Which architectural approach best meets this requirement?

An ISSEP is designing a cross-domain solution (CDS) to allow a high-assurance system to transfer data to a low-assurance system. The CDS must enforce data flow policies and prevent leakage of sensitive information. Which security engineering approach should the ISSEP implement to meet these requirements?

An ISSEP is defining the security requirements for a new federal information system that will process Controlled Unclassified Information (CUI). The system owner mandates that the design must support continuous monitoring and near real-time risk determination. Which NIST publication should the ISSEP reference to implement the required continuous monitoring capabilities?

You are assessing a system for compliance with FIPS 140-3. You need to ensure that the cryptographic module being used for TLS termination on a load balancer meets specific physical security requirements. Where should you look for the validation status of the cryptographic module?

An ISSEP is developing a security architecture for a system that will use a service-oriented architecture (SOA) with multiple web services. The system must ensure that messages are protected end-to-end and that services can verify the identity of the sender. Which TWO security standards or specifications should be incorporated into the architecture to meet these requirements? (Choose two.)

In the context of the NIST Risk Management Framework (RMF), which step involves the initial identification of security controls based on the system's impact level?