(ISC)2 Information Systems Security Engineering Professional (CISSP-ISSEP, Aug 2025 blueprint) (ISC) (ISC) — Questions 1–75

When mapping security requirements from ISO/IEC 27001 to a cloud-native architecture, you are configuring Azure Policy to ensure all newly created storage accounts have 'Secure transfer required' enabled. What is the most efficient way to achieve this enforcement?

A security engineer is validating a server's hardening posture against CIS Benchmarks. Which TWO of the following configurations must be verified for the SSH service?

Which THREE actions should be taken when decommissioning an information system to ensure data security?

Which THREE factors are essential when performing a threat model using the STRIDE methodology?

You are managing a change request in ServiceNow. To ensure compliance with the RFC process for a security patch, which state transition is mandatory before implementation?

When designing for 'System Survivability', what is the most critical engineering principle to incorporate?

Which TWO security standards are most relevant for an ISSEP designing a secure payment processing system?

Which of the following is the most appropriate action when an ISSEP identifies a high-risk vulnerability in a system that is currently in production?

An ISSEP is assessing the security of a CI/CD pipeline. Which THREE of the following practices are crucial to ensure the security of the software supply chain?

Which THREE activities are included in the 'Risk Management Framework' (RMF) step 'Assess'?

You are performing a security validation of a database to ensure that all administrative actions are captured. Which feature must be checked to confirm that logging is capturing these events?

You are assessing a system that uses 'Homomorphic Encryption' for data processing. What is the primary operational trade-off the system designer must consider?

An organization is deploying a serverless architecture (AWS Lambda). How does the risk of patch management change compared to a traditional IaaS model?

When applying NIST SP 800-160 Systems Security Engineering principles, which THREE activities are critical during the 'System Design' phase to ensure confidentiality and integrity?

A system uses SAML 2.0 for SSO. To prevent SAML assertion tampering, what is the mandatory cryptographic requirement?

During a cloud security audit, you need to verify that IAM users do not have overly permissive policies. Which AWS feature provides automated validation of IAM policy adherence to least privilege?

When applying NIST SP 800-53 controls to a new information system, which step occurs immediately after the 'Categorize' process in the RMF?

In a Kubernetes environment, you are updating a security sidecar container. Which deployment strategy ensures zero downtime while maintaining security posture?

An ISSEP is conducting a gap analysis between a legacy system and ISO/IEC 27001 requirements. The system lacks automated audit logging. Which control implementation is most effective for meeting the 'Logging and Monitoring' requirements?

Which THREE elements are essential in a Change Management policy?

Which THREE of the following are recognized categories of security controls in NIST SP 800-53?

In the context of the NIST Cybersecurity Framework, which function is specifically supported by the 'Systems Security Engineering' process during the 'Identify' stage?

Which principle suggests that the security of a system should not depend on the secrecy of its design or implementation?

Which TWO items should be included in a system's security architecture documentation?

Which TWO items should be included in a 'Security Requirements Traceability Matrix' (SRTM) to ensure comprehensive engineering coverage?

You are assessing an Engineered System that utilizes a Trusted Platform Module (TPM) for secure boot. A scan reveals that the firmware version is outdated and susceptible to a known key-injection vulnerability. Which action should the ISSEP prioritize?

Which THREE items should be included in an Incident Response (IR) plan for an information system?

Which THREE strategies are used to mitigate risk during a production software change?

During a risk assessment of an industrial control system (ICS), the engineer identifies that an administrative workstation shares the same VLAN as the PLC network. Which remediation action is most effective from a risk management perspective?

You are validating the security of a database system. Which THREE of the following are standard verification steps for database security?

When designing high-availability systems, what is the primary security engineering concern regarding 'Fail-over' mechanisms?

During a system migration, you need to ensure integrity of transferred data. What is the best cryptographic method?

Which THREE of the following are considered 'Common Criteria' (ISO/IEC 15408) elements for evaluating the security functionality of a product?

You are verifying that a specific file on a server has not been modified. Which tool or command is most appropriate for verifying file integrity?

You are performing an audit of a new system's 'Trusted Computing Base' (TCB). Which observation would indicate a violation of the 'Separation of Duties' principle?

An ISSEP is performing a system-level risk assessment on a cloud-native architecture using the NIST SP 800-37 RMF. During the 'Assess' step, the engineer identifies that an automated security configuration baseline is missing for the container orchestration layer. What is the most appropriate action to maintain RMF compliance?

When designing a secure multi-tenant cloud application, what is the best way to ensure tenant data isolation?

When conducting a security impact analysis for a system change in a Federal environment, what is the primary purpose of reviewing the FIPS 199 categorization?

You are verifying that a firewall rule correctly blocks traffic from an unauthorized network. Which tool is best suited for testing this connectivity?

Which THREE security-relevant criteria should be assessed when evaluating a cloud service provider (CSP)?

As part of an accreditation process, you are validating that the system meets NIST 800-53 requirements for incident response. Which THREE items must be present in the verification evidence?

An ISSEP is evaluating the risk of an API that uses basic authentication over HTTP. What is the most significant risk, and how should it be mitigated?

Which TWO actions should be included in a secure decommissioning process for a physical server?

When architecting a system to meet ISO 27001 requirements for secure system engineering, which TWO of the following design principles should be prioritized for protecting sensitive data at rest?

Which THREE items should be included in a thorough 'System Security Plan' (SSP)?

Which THREE of the following are essential for protecting against 'Man-in-the-Middle' (MitM) attacks in a service-oriented architecture?

An ISSEP is evaluating the security of an API gateway. To implement OAuth 2.0 effectively, which flow should be recommended for a native mobile application?

When validating a server's security implementation, which THREE of the following log files or directories should be reviewed to check for unauthorized activity?

You are validating the security implementation of a wireless network. Which THREE of the following are necessary to verify that WPA3 is properly configured?

As part of validating a cloud environment's security, you need to ensure the network boundary is protected. Which THREE of the following are valid verification tasks?

During a system validation audit, you must verify the configuration of a hardware security module (HSM). Which THREE of the following are valid validation checks?

Which TWO criteria are used to determine if a change request must be reviewed by the Change Advisory Board (CAB)?

An organization is adopting a DevSecOps model. To ensure security engineering principles are met, which tool should be integrated into the CI/CD pipeline to automate the detection of vulnerabilities in proprietary code during the 'Build' stage?

When validating the security of an email gateway, which THREE of the following settings should be verified to prevent spoofing and improve trust?

An ISSEP is configuring an AWS S3 bucket. What policy setting best prevents public access while allowing access from a specific VPC?

You are assessing an Engineered System that uses a micro-segmentation strategy to isolate workloads. An attacker has compromised a single container and is attempting to perform network reconnaissance. What mechanism should block this attempt?

In an SCAP-compliant environment, you are validating a system against a DISA STIG. Which file extension is typically used for the definition of the security checks?

Which document outlines the specific security steps to be taken when a workstation reaches its end-of-life?

You are designing an incident response architecture for a cloud environment. Which TWO of the following configurations are critical for ensuring effective forensic readiness according to NIST SP 800-61?

An ISSEP architect is designing a system under NIST SP 800-53 controls and needs to implement an automated mechanism to enforce the principle of least privilege for non-privileged accounts. Which configuration in an AWS environment best aligns with the 'AC-6' control requirement?

You are verifying the implementation of an Intrusion Detection System (IDS). Which technique is used to ensure the IDS is detecting traffic as expected?

An ISSEP is designing a secure storage solution for a database. To ensure data integrity, which mechanism is most reliable?

You are conducting a threat modeling exercise using the STRIDE methodology. A specific service-to-service communication path lacks mutual TLS. Which STRIDE category does this vulnerability primarily fall under?

What is the primary advantage of 'Defense in Depth'?

Which command line utility is used on Linux to verify the integrity of binary files during a maintenance patch update?

Which TWO of the following are considered critical components of a Secure Software Development Life Cycle (SDLC)?

Which TWO of the following are key inputs for a quantitative risk analysis?

What is the correct order of operations when handling a vulnerability in a production system according to the RMF?

Which TWO of the following are critical for an effective 'Continuous Monitoring' (ConMon) program under RMF?

When using the STRIDE threat modeling methodology, which security principle does 'Tampering' specifically attempt to violate?

You are evaluating the risk of an Artificial Intelligence (AI) model deployment. The model is susceptible to 'model inversion' attacks, where an attacker can reconstruct sensitive training data. What is the most effective engineering control to prevent this?

Which THREE are key components of a 'Secure Development Lifecycle' (SDL) process?

Which engineering document should be created during the early stages of the system lifecycle to define the security-relevant mission goals and constraints?

You are performing a security validation of a Kubernetes cluster using CIS Benchmarks. Which tool should you use to automate the verification of the 'etcd' configuration settings?

You are utilizing Terraform to manage infrastructure as code. To ensure security-critical changes are not committed to production without authorization, which feature should you implement?