ISC Practice Question: Systems Security Implementation Verification And Validation
During a system validation audit, you must verify the configuration of a hardware security module (HSM). Which THREE of the following are valid validation checks?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Confirm the HSM is running the latest vendor-signed firmware.
HSM validation involves checking for authorized access, firmware integrity, and operational state.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Confirm the HSM is running the latest vendor-signed firmware.
Why this is correct
Firmware integrity is essential for security validation.
- ✗
Ensure all keys are stored in plaintext on the HSM's management PC.
Why it's wrong here
Keys must never be stored in plaintext on a management PC.
- ✗
Check if the HSM allows anonymous access to the administrative shell.
Why it's wrong here
Administrative access must be strictly authenticated.
- ✓
Check that administrative access requires M-of-N multi-party authorization.
Why this is correct
Multi-party control prevents a single malicious insider from compromising the keys.
- ✓
Verify that the HSM is physically secured in a locked rack.
Why this is correct
Physical security is a primary control for HSMs.
About these practice questions
Courseiva writes every ISC question from scratch — 209 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.