(ISC)2 Information Systems Security Engineering Professional (CISSP-ISSEP, Aug 2025 blueprint) (ISC) (ISC) — Questions 76–150

When evaluating a system's resilience to 'Supply Chain Attacks', what is the most important engineering practice to implement?

You are verifying the implementation of disk encryption on a Windows server. Which command is used to confirm that BitLocker is active on the C: drive?

Which TWO of the following are essential components of a robust threat modeling process for an engineered system?

An ISSEP is evaluating the security of an OT/ICS environment. Which THREE of the following are considered high-priority mitigation strategies to protect against common ICS cyber threats?

You are verifying the implementation of a FIPS 140-2 validated module in an on-premises Linux server. Which command correctly verifies that the cryptographic module is operating in the intended FIPS mode?

When considering 'System Availability', what is the primary advantage of a 'Load Balancer' in a security engineering context?

You are designing a secure data enclave for highly sensitive research data. What is the most robust method to enforce physical and logical separation?

When designing a system for 'High Integrity' (using the Biba model), which THREE rules must be enforced?

Which THREE factors must be evaluated when determining if a system component is 'security-critical'?

Which THREE activities are essential when conducting a 'Security Impact Analysis' for a proposed system change?

During the design of a PKI hierarchy for a highly classified system, the ISSEP needs to ensure that the Root CA is kept offline. What is the most appropriate way to sign the Subordinate CA request?

Which document is used to track and manage vulnerabilities identified during the assessment phase of the RMF?

Which TWO architectural patterns are considered best practices for securing cloud-native applications?

You are auditing the implementation of an API Gateway. How do you verify that rate limiting is effectively preventing a DoS attack?

You are performing a 'Sanitization' of a drive according to NIST 800-88. If the drive is 'Clear' status, what does this imply?

An ISSEP is reviewing the 'Maintain' phase of the RMF for a system that has undergone a significant software update. What is the most critical activity to ensure that the system's security posture remains intact?

An ISSEP is designing a secure CI/CD pipeline. Which technique is most effective for preventing secrets (e.g., API keys) from being committed to the source code repository?

Which THREE components are necessary to define a complete 'Security Policy' for an enterprise system?

When configuring AWS Security Groups for a multi-tier application architecture, an engineer must ensure that the web tier only communicates with the application tier on port 8080. Which configuration best adheres to the principle of Defense in Depth?

When engineering a cryptographically secure system, what is the primary risk associated with custom cryptographic implementations?

In the context of 'Systems Engineering', what does the term 'Security-Enforcing' mean regarding a system component?

When designing a secure system architecture, which TWO of the following are primary considerations for achieving the principle of 'Defense in Depth'?

Which TWO controls are recommended under NIST SP 800-53 for protecting data at rest in a high-impact system?

An ISSEP is conducting a quantitative risk assessment for a mission-critical database. The Annualized Rate of Occurrence (ARO) is 0.5, and the Single Loss Expectancy (SLE) is $100,000. What is the Annualized Loss Expectancy (ALE)?

You are analyzing a proprietary SCADA system's threat landscape. The system uses a non-standard protocol that prevents the use of traditional deep packet inspection (DPI) tools. Which method provides the most effective risk reduction?

What is the primary function of a Change Advisory Board (CAB) in an ITIL-based environment?

Which TWO of the following are acceptable ways to handle residual risk after implementing security controls in an RMF process?

An ISSEP is performing a supply chain risk assessment for an IOT-based sensor array. Which finding poses the highest systemic risk to the overall system integrity?

What is the first step when preparing a system for secure disposal?

When validating a secure boot implementation on a server, which component should be verified in the UEFI firmware settings?

When conducting a security assessment of a system's 'Trusted Computing Base' (TCB), what is the most important attribute to verify?

You are assessing an Engineered System that uses 'Hardware Security Modules' (HSM). Which THREE of the following are the most critical administrative risks to address in an HSM policy?

Which TWO of the following are valid methods for maintaining the integrity of system design documentation throughout the system lifecycle?

An engineering team is designing a new cloud infrastructure. To ensure the system complies with FIPS 140-3, which action must the ISSEP verify during the design phase?

In a cloud environment, you must ensure that VM snapshots are encrypted. What is the most effective approach?

During a system accreditation process, you need to verify that logs are being sent to a centralized SIEM. Which method provides the most reliable verification of log integrity?

An ISSEP needs to secure inter-process communication (IPC) on a Linux host. Which feature should be configured to prevent unauthorized processes from accessing sensitive memory space?

An ISSEP is reviewing the risk of data residency for a system. Why is data residency a significant factor in a cloud-based risk assessment?

An ISSEP is configuring a WAF to mitigate OWASP Top 10 risks. Which configuration best addresses the 'Injection' category?

Which of the following is the most important document for an ISSEP to review when starting a risk assessment for a new system to ensure that all security requirements are captured?

During the RMF process, which document serves as the primary record for the security controls selected and their implementation status?

You are assessing a system that uses machine learning for fraud detection. The system is experiencing 'concept drift'. What is the risk, and how should it be managed?

When selecting controls for a system in a high-compliance environment, what is the best practice for tailoring?

You are verifying the security configuration of an Amazon S3 bucket. Which S3 feature must be enabled to ensure that object deletions are reversible in case of accidental or malicious data loss?

When conducting a security validation of a cloud-based infrastructure, which TWO of the following tasks are essential for verification?

You are reviewing a Change Management plan for an ICS (Industrial Control System). What is the most critical risk during the 'Implement' phase?

Which THREE items are required to verify the integrity of a downloaded software package?

A security engineer is validating an AWS environment using AWS Config. Which action should be taken to ensure continuous compliance monitoring against a custom security policy?

In the systems engineering V-model, how does 'Verification' differ from 'Validation'?

You are assessing a system that uses hardware security modules (HSM) for signing code. An attacker is attempting a 'side-channel' attack on the HSM. Which mitigation strategy should be implemented to protect the signing keys?

An ISSEP is assessing the risk of a system that uses 'Secrets Management' services (e.g., HashiCorp Vault). Which THREE of the following are best practices for securing the secrets themselves?

An administrator needs to wipe a decommissioned laptop hard drive. Which method meets the NIST 800-88 'Purge' standard for magnetic media?

Which TWO factors must be assessed when determining if a change is 'Emergency' versus 'Standard'?

You are designing a secure microservices architecture. To meet the 'Data at Rest' security requirements, you decide to use envelope encryption. Which sequence correctly describes the flow of managing the Data Encryption Key (DEK)?

Which of the following is a primary objective of a 'System-Level Risk Assessment'?

A security engineer is validating that an application server is not vulnerable to common web attacks. What is the first step in the validation process?

An organization is migrating to a Zero Trust architecture as defined in NIST SP 800-207. Which component is responsible for evaluating the context of a request, such as device health and location, before granting access?

Which THREE factors are critical for an effective 'Continuous Monitoring' (ConMon) program?

When engineering a 'Secure Boot' sequence, what is the primary security objective?

You are verifying the implementation of a microsegmentation policy in a software-defined network (SDN). Which approach is most effective for validating that isolation is enforced?

A system is being designed to process PII. The requirement is to maintain data sovereignty while utilizing a hybrid cloud model. What architectural strategy best achieves this?

When designing an information system architecture, what is the primary role of a System Security Plan (SSP)?

You are verifying the security of a Linux server's SSH configuration. Which directive should be set to 'no' to prevent unauthorized remote root login?

You are managing the lifecycle of an enterprise-level cryptographic key. What is the most critical step prior to key decommissioning?

An ISSEP must secure a server-to-server connection that currently uses plaintext LDAP. What is the recommended secure alternative?

In the context of the System Development Life Cycle (SDLC), what is the primary purpose of a security control baseline?

A system uses a hardware-based root of trust (RoT) for verifying code execution. An attacker has managed to perform a 'fault injection' attack to bypass the verification. What is the most effective hardware-level defense?

Which TWO methods are effective for managing cryptographic keys in a cloud architecture?

Which security model is specifically designed to prevent the unauthorized flow of information from high-security levels to low-security levels (no read up, no write down)?

An ISSEP is designing a secure architecture for a cloud environment using NIST SP 800-160. Which architectural pattern should the engineer prioritize to ensure the principle of Least Privilege is enforced at the service-to-service communication layer within a Kubernetes cluster?

What is the primary function of an 'API Gateway' in a microservices security architecture?

You are validating the security of a web service using OAuth 2.0. Which specific verification step ensures that the authorization code is not leaked?

An ISSEP is architecting a secure API environment. Which strategy is most effective for throttling and preventing resource exhaustion?

Which type of change is typically excluded from a formal Change Advisory Board review process?

A security professional is verifying the implementation of MFA on an administrative account. What is the most reliable way to confirm the MFA configuration is working correctly?