209 questions total · 3pages · All types, answers revealed
Page 3 of 3
What is the primary benefit of modularity in secure systems design?
Smaller, independent parts are easier to audit and secure.
Why this answer
Modularity allows for fault isolation and easier security verification of individual components.
When designing for high availability and security, what is the best use of a Load Balancer (LB) from a security perspective?
Centralized inspection is a standard security design pattern.
Why this answer
A Load Balancer can serve as an SSL termination point, allowing the security team to inspect traffic for malware at a single, centralized ingress point.
Which TWO of the following statements are true regarding the relationship between the System Security Plan (SSP) and the Plan of Action and Milestones (POA&M)?
The SSP is the baseline requirement document.
Why this answer
The SSP defines the target security posture, while the POA&M tracks the remediation of items that fall short of that target (gaps). They work together to represent the security status of the system.
An ISSEP is reviewing the security architecture for a system that handles PII. The system uses a centralized database for PII storage. What is the primary risk associated with this design pattern?
Centralization inherently increases the impact of a successful breach.
Why this answer
A centralized database creates a 'single point of failure' (or 'single point of compromise'), where an attacker gaining access to the database potentially compromises all stored PII at once.
What is the primary objective of a 'Security Design Review' early in the lifecycle?
Early detection reduces development costs and risk.
Why this answer
A design review aims to identify security flaws before they are implemented, as it is much cheaper to fix them in the design phase than during production.
What is the primary risk of a 'Privileged User' who lacks proper oversight?
High access levels require checks and balances.
Why this answer
Privileged users have significant access, so without oversight (separation of duties/auditing), they can perform malicious actions or make catastrophic errors.
You are decommissioning an AWS EBS volume containing sensitive data. To comply with NIST SP 800-88, which action is required after logical deletion?
Deleting the KMS key renders the data cryptographically shredded and unrecoverable.
Why this answer
AWS performs physical destruction of the underlying storage media when a volume is deleted; however, the cryptographic erasure via AWS KMS key deletion is the standard for secure disposal in the cloud.
Which TWO of the following are common pitfalls when tailoring security controls in an RMF implementation?
Documentation is a mandatory RMF requirement for tailoring.
Why this answer
Tailoring must be justified and documented. Pitfalls include excessive tailoring (reducing security too much) or lack of justification, which both undermine the compliance posture.
When validating a server's compliance with hardening guidelines, which tool provides the most efficient way to check OS configuration against the DISA STIG?
SCC is the official tool provided by DISA for automated STIG compliance verification.
Why this answer
SCAP Compliance Checker (SCC) is designed specifically to automate the verification of STIGs.
When managing a security-sensitive change in a regulated environment, why is 'Separation of Duties' applied to the 'Build' and 'Deploy' roles?
Separation ensures no single person controls the entire lifecycle.
Why this answer
Separation of duties prevents a single individual from introducing malicious code and deploying it into production, a critical control for integrity.
An organization uses an HSM to store root CA keys. As part of the annual validation, which action must be performed to confirm the HSM's physical security posture?
Physical security validation requires checking for signs of physical tampering or unauthorized access.
Why this answer
Physical tamper evidence is a critical component of HSM security validation.
An ISSEP is tasked with securing an internal web application. Which headers should be implemented to prevent clickjacking?
These headers instruct browsers to prevent the site from being framed.
Why this answer
The X-Frame-Options or Content-Security-Policy (CSP) with 'frame-ancestors' are the standard headers used to prevent clickjacking.
What is the primary objective of the 'Assessment' phase in the NIST RMF?
Verification is the goal of assessment.
Why this answer
The Assessment phase is dedicated to determining if the selected security controls are correctly implemented and operating as intended.
An ISSEP is reviewing a cloud-based application that uses a multi-factor authentication (MFA) provider. The provider experiences an outage, and the system is configured to 'fail-open'. What is the security risk?
Fail-open is a security failure when availability is prioritized over integrity/confidentiality.
Why this answer
A 'fail-open' configuration means that when a security control (MFA) is unavailable, the system grants access anyway, effectively bypassing the security requirement and creating a critical vulnerability.
Which THREE elements are required in a high-security access control policy?
Defines the enforcement logic.
Why this answer
Access control policies must define roles (who), resources (what), and the conditions (how/when) under which access is granted.
When implementing FIPS 140-2/-3 validated cryptography in a system, what is the most important factor to verify?
Certification by NIST is the only way to ensure the module meets FIPS standards.
Why this answer
The cryptographic module must be explicitly listed on the CMVP (Cryptographic Module Validation Program) validated list, not just 'based on' an algorithm.
When managing decommissioning of a cloud-native application, which document must be updated to reflect the removal of security controls?
The SSP must be updated to indicate that the system and its associated controls are retired.
Why this answer
The System Security Plan (SSP) is the authoritative document describing a system's security controls; removing a system requires updating this document to reflect the change in boundary.
You are integrating security requirements into the Systems Engineering V-Model. At which stage should the Information Systems Security Engineer (ISSE) define the security functional requirements to ensure traceability to the system architecture?
Requirements analysis is the foundational stage where security constraints and functional needs are mapped to system goals.
Why this answer
Security requirements must be defined during the Requirements Analysis phase to ensure they are baked into the system design rather than added as an afterthought.
An ISSEP professional is reviewing an architecture for compliance with NIST SP 800-160, Systems Security Engineering. Which THREE of the following activities are core to the 'Trustworthiness' objective for an engineered system?
Establishing a foundational level of trust within the hardware layer.
Why this answer
Trustworthiness is built through robust design, consistent verification, and proactive mitigation of vulnerabilities throughout the lifecycle.
Which of the following is an example of an 'Administrative' security control?
Policies and plans are administrative controls.
Why this answer
Administrative controls focus on policies, procedures, and guidelines, such as an incident response plan.
What is the primary goal of the 'Authorization' phase in the NIST RMF?
Formal risk acceptance is the key outcome of this phase.
Why this answer
The authorization phase is where the Authorizing Official (AO) reviews the security documentation and decides whether to accept the risk associated with operating the system.
An organization is adopting ISO 27001. Which document is required to justify the inclusion or exclusion of specific controls?
The SoA is a core requirement for ISO 27001 certification.
Why this answer
The Statement of Applicability (SoA) is the required document in ISO 27001 that outlines which controls are applicable and provides justifications for those that are excluded.
A system is undergoing accreditation. You need to verify that automated vulnerability scanning is occurring on a recurring basis. Which artifact provides the best evidence?
Evidence of consistent, recurring scan reports is the strongest proof of operational compliance.
Why this answer
Scheduled task logs or scan reports with time-stamped evidence are the best way to verify recurring operations.
You are validating the security of a web application. Which TWO of the following actions verify that input validation is effective against SQL injection?
Manual testing confirms if the application successfully sanitizes or rejects malicious input.
Why this answer
Using parameterized queries and reviewing input filter logic are the two most effective ways to verify SQLi defenses.
During a system engineering project, an ISSEP discovers that a vendor-provided API lacks robust authentication. Which risk management strategy is best suited for this vulnerability when the API cannot be updated by the development team?
The API gateway acts as a security proxy, effectively shielding the vulnerable legacy API.
Why this answer
In engineering, when a component is inherently vulnerable, compensating controls like API gateways that perform authentication and authorization can effectively mitigate the risk without modifying the legacy component.
This command displays the ACL entries and their hit counts, allowing you to verify traffic filtering.
Why this answer
The 'show access-list' command displays the ordered list of rules and their hit counts, which is vital for validation.
Which THREE methods can be used to ensure high availability for a database in a secure architecture?
Protects against regional service outages.
Why this answer
Active-passive failover, replication (read replicas), and multi-region deployment are the standard HA methods for databases.
A legacy database must be decommissioned. You need to ensure the data is retrievable for 7 years for regulatory compliance. Which strategy is most secure?
WORM provides integrity and satisfies long-term retention requirements.
Why this answer
Moving data to offline, immutable storage (WORM) ensures compliance with retention policies while protecting against unauthorized modification or deletion.
When designing a system for 'Non-repudiation', which technical control is essential?
Signatures provide cryptographic proof of origin.
Why this answer
Digital signatures using public-key cryptography ensure that a message or transaction can be linked to a specific user and not disavowed.
An ISSEP is conducting a risk assessment for a system that will be hosted in a multi-tenant cloud environment. Which risk is unique to the multi-tenancy model?
Side-channel attacks are a primary risk in shared resource environments.
Why this answer
The 'noisy neighbor' or cross-tenant data leakage risk is inherent to multi-tenant architectures where shared hardware/hypervisor resources could potentially be exploited to access data from another tenant.
What is the primary purpose of a 'Sanitization' process in the context of system decommissioning?
The primary goal is preventing unauthorized data access.
Why this answer
Sanitization is the process of removing data from storage media such that the data cannot be reconstructed by any forensic means.
You are configuring a CI/CD pipeline in GitLab to ensure security-critical changes are verified. Which mechanism ensures that only authorized engineers can merge changes to the master branch?
This feature enforces mandatory code reviews and restricts who can merge to the protected branch.
Why this answer
GitLab protected branches allow for granular permissions to restrict who can push or merge, which is a standard security control for change management.
An ISSE is defining the 'Security Architecture' for an enterprise network. Which concept should be prioritized to ensure that an attacker who gains access to one segment cannot easily pivot to others?
Segmentation isolates traffic and limits lateral movement.
Why this answer
Network segmentation and compartmentalization are essential for preventing lateral movement.
When validating a firewall's implementation, what does checking the 'Implicit Deny' rule verify?
This is the principle of least privilege in networking; verifying this rule confirms the default-deny posture.
Why this answer
The implicit deny rule is the final catch-all rule that drops all traffic not explicitly allowed.
During a security audit of a PKI implementation, which TWO of the following must be verified to ensure the integrity of the certificate chain?
Revocation is critical; if the CRL is unavailable, compromised certificates cannot be invalidated.
Why this answer
Verifying the Root CA and the Certificate Revocation List (CRL) are critical for PKI trust and validation.
In a Zero Trust architecture, what is the most critical function of a Policy Decision Point (PDP)?
This is the core definition and function of a PDP in a Zero Trust framework.
Why this answer
The PDP is the central engine that evaluates requests against security policies and context to make an 'allow' or 'deny' decision.
When integrating security into the requirements phase, what is the value of 'Misuse Cases'?
Misuse cases simulate attacker behavior to identify defensive needs.
Why this answer
Misuse cases define what a malicious actor might try to do to the system, helping to derive security requirements.
You are configuring a secure baseline for a server migration. Which NIST SP 800-53 control category covers 'System and Services Acquisition' regarding the maintenance of security-critical configurations?
SA-10 covers the maintenance of security-relevant configuration items.
Why this answer
NIST SP 800-53 SA controls (System and Services Acquisition) specifically cover the lifecycle management, including initial configuration and security baseline maintenance.
You are designing an embedded system for a medical device. The device needs to store encryption keys securely. The hardware does not support a dedicated HSM or TPM. What is the most robust software-based alternative to protect these keys?
A TEE provides a hardware-isolated environment that protects keys even if the main OS is compromised.
Why this answer
In the absence of dedicated hardware, an obfuscated key store with a Trusted Execution Environment (TEE) or encrypted key wrapping utilizing a unique hardware-derived ID is the most secure software-centric approach.
Which THREE of the following are necessary to successfully implement Zero Trust in an existing enterprise environment?
Zero Trust assumes identity is the new perimeter.
Why this answer
Strong identity verification, micro-segmentation of the network, and continuous monitoring are the three pillars of a successful Zero Trust implementation.
During a 'Design Review', an ISSE notices that the system architecture relies on 'Security through Obscurity'. Why is this considered an engineering flaw?
Once the secret design is found, the protection vanishes.
Why this answer
Obscurity is not a reliable control; if the design is discovered (which it eventually will be), the system has no remaining security.
You are assessing an Engineered System for cloud-native vulnerabilities. Which THREE of the following are common misconfigurations in containerized environments that an ISSEP should identify?
Running as root allows container escapes to compromise the host OS.
Why this answer
Common container security issues include running as root, insecure communication between containers, and exposing management interfaces unnecessarily.
When validating the security of a database implementation, how do you verify that sensitive data at rest is encrypted using Transparent Data Encryption (TDE)?
This view provides the encryption state for databases that have TDE enabled.
Why this answer
Verifying the system catalog or dynamic management views is the standard way to confirm TDE status.
Which THREE items should be included in a Post-Implementation Review (PIR) for a security change?
Assessing for regressions or new attack vectors.
Why this answer
A PIR ensures the change achieved its goal, did not introduce new vulnerabilities, and met compliance requirements.
Which THREE of the following are valid 'Authentication' factors?
Biometric authentication is a standard factor.
Why this answer
Authentication factors fall into categories: something you know, something you have, and something you are.
During a penetration test of a web application, you identify an insecure direct object reference (IDOR). What is the most effective way to verify that your remediation via access control checks is successful?
Intruder can be configured to iterate through object IDs while authenticated as different users to confirm access control enforcement.
Why this answer
Regression testing ensures that the fix addresses the vulnerability without breaking functionality.
During a validation exercise, you need to confirm that an application's logging mechanism is compliant with NIST SP 800-92. Which element must be verified?
These fields are essential for accountability and forensic analysis as outlined in the guidance.
Why this answer
NIST SP 800-92 emphasizes that logs must include user IDs, timestamps, and success/failure status.
A security engineer is validating the implementation of a TLS 1.3 configuration on an Nginx server. Which configuration directive must be verified to ensure only secure ciphers are used?
Restricting the protocol to TLSv1.3 is the primary way to ensure modern, secure communication.
Why this answer
The 'ssl_protocols' and 'ssl_ciphers' directives are critical for TLS implementation verification.
During the 'Engineering Process Integration' phase, an ISSE identifies that the legacy system lacks support for modern TLS 1.3 encryption. What is the most appropriate engineering response?
Compensating controls provide necessary security when native support is missing.
Why this answer
The ISSE should perform a gap analysis to determine if a compensating control can mitigate the risk until the legacy system can be upgraded or replaced.
Which THREE technologies are acceptable for the secure disposal of solid-state drives (SSDs)?
Shredding to small particles is the most secure disposal method.
Why this answer
NIST 800-88 suggests physical destruction, degaussing (if permitted, though not for SSDs), or cryptographic erasure for SSDs, though physical destruction is most definitive.
In the context of the 'Common Criteria', what is the role of the 'Security Target'?
The ST documents what the product claims to do security-wise.
Why this answer
The Security Target (ST) defines the security requirements and claims for a specific IT product, which are then evaluated against a Protection Profile.
You are validating the security of a containerized environment (e.g., Docker). Which THREE of the following configurations should be checked for security compliance?
Running as a non-privileged user limits the impact of a container escape.
Why this answer
Container security verification requires checking privilege levels, root usage, and image source trust.
An ISSEP is performing a threat assessment for a mobile application. What is the biggest risk when using hardcoded API keys for third-party services within the app code?
This is a classic vulnerability in mobile app development.
Why this answer
Hardcoded keys are easily extractable via reverse engineering the app binary, leading to unauthorized use of the third-party services and potential compromise of the developer's account.
When configuring a 'Logging and Auditing' system, what is the most important consideration for 'Log Integrity'?
Hashing detects changes; secure storage prevents deletion.
Why this answer
Logs must be protected from tampering; hashing and secure remote storage are standard methods to ensure they remain trustworthy.
When applying the principle of Least Privilege, which technical implementation is most effective in a microservices architecture?
ABAC allows for fine-grained policy definition required for Least Privilege.
Why this answer
Attribute-Based Access Control (ABAC) provides granular control based on user, environment, and resource attributes, ideal for complex microservice environments.
You are assessing a system for compliance with FIPS 140-3. You need to ensure that the cryptographic module being used for TLS termination on a load balancer meets specific physical security requirements. Where should you look for the validation status of the cryptographic module?
This registry is the definitive source for verifying if a specific cryptographic module is FIPS-validated.
Why this answer
The NIST Cryptographic Module Validation Program (CMVP) maintains the official registry of all FIPS-validated modules.
Which TWO aspects of a system's lifecycle must be documented in the decommission plan?
Provides evidence that data was handled securely.
Why this answer
A decommissioning plan must ensure data is properly handled and that the asset is removed from all relevant inventories for regulatory compliance.
When disposing of SSDs that contain PII, why is traditional degaussing ineffective?
SSDs use flash memory cells that do not rely on magnetic domains.
Why this answer
SSDs store data using floating gate transistors (NAND flash), which are not susceptible to magnetic fields, unlike traditional spinning disks.
In the context of the NIST Risk Management Framework (RMF), which step involves the initial identification of security controls based on the system's impact level?
The Select step involves choosing the appropriate security controls for the information system.
Why this answer
Step 2 of the RMF is 'Select', where security controls are selected based on the categorization performed in Step 1.
Page 3 of 3
Practice ISC by domain
Target a specific domain to shore up weak areas.