CISSP Security Architecture and Engineering Practice Question
A security architect is designing a system to protect against side-channel attacks that exploit electromagnetic emanations. Which TWO controls are most effective?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TEMPEST shielding
TEMPEST shielding reduces emanations, and Faraday cages block electromagnetic signals. While physical access control is important, it does not directly address emanations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data encryption at rest
Why it's wrong here
While encrypting data at rest secures stored information against unauthorized physical access or theft of storage media, it does nothing to mitigate the risk of electromagnetic emanation leakage. During active processing, unencrypted data signals can still be reconstructed from RF emissions, rendering storage-level encryption ineffective against TEMPEST-style eavesdropping.
- ✓
TEMPEST shielding
Why this is correct
TEMPEST shielding involves applying specialized materials, filters, and design principles directly to electronic equipment to suppress compromising electromagnetic emanations. This standard prevents adversaries from intercepting and reconstructing sensitive data processed by the system through transient electromagnetic pulse emanations.
- ✗
Intrusion detection system
Why it's wrong here
An intrusion detection system monitors network traffic and system logs for malicious activity or policy violations. Because it operates purely at the logical and network layers, it is entirely blind to physical-layer side-channel attacks, such as the passive interception of electromagnetic signals leaking from hardware.
- ✗
Time-based access controls
Why it's wrong here
Time-based access controls restrict user access to resources during specific hours or intervals to enforce the principle of least privilege. This logical control does not alter the physical properties of hardware, meaning electromagnetic signals will still radiate freely whenever the system is in operation.
- ✓
Faraday cage
Why this is correct
A Faraday cage is a physical enclosure formed by conducting material that blocks external static and non-static electrical fields while containing internal electromagnetic signals. By distributing electrical charges around the exterior of the cage, it prevents sensitive RF emanations from escaping the secure perimeter and blocks external interference.
Go deeper
Related to this question
Learn chapter
Security Governance and Principles
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
About these practice questions
One of 747 original CISSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.