CAP Security Architecture & Engineering

Question 1

Which security model is primarily designed to prevent unauthorized data disclosure by enforcing confidentiality based on classification labels?

Accepted Answer

Bell-LaPadula Confidentiality Model

Answer

Biba Integrity Model

Answer

Clark-Wilson Model

Answer

Brewer-Nash Model

Question 2

In the context of CAP and the RMF, what does the principle of 'least privilege' require?

Accepted Answer

Users receive only the minimum access rights necessary to perform their job functions

Answer

Systems are designed with the fewest possible security controls

Answer

Only privileged administrators can access classified information

Answer

Security policies must be kept as simple as possible

Question 3

Which NIST Special Publication provides the catalog of security and privacy controls for federal information systems and organizations?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-37

Answer

NIST SP 800-30

Answer

NIST SP 800-137

Question 4

What is the primary purpose of defining an 'authorization boundary' in information system architecture?

Accepted Answer

To delineate the scope of the information system for authorization purposes, including all components to be authorized

Answer

To define the physical perimeter of the data center

Answer

To separate classified from unclassified networks at the firewall

Answer

To establish the geographic boundary for data storage locations

Question 5

Which security architecture principle ensures that no single individual can complete a sensitive or critical process alone?

Accepted Answer

Separation of duties

Answer

Least privilege

Answer

Need-to-know

Answer

Defense in depth

Question 6

What does 'defense in depth' mean as a security architecture strategy?

Accepted Answer

Deploying multiple layers of security controls throughout an information system so that failure of one does not compromise overall security

Answer

Implementing a single comprehensive security perimeter around the network

Answer

Using deep packet inspection at all network ingress and egress points

Answer

Building underground, hardened data centers resistant to physical attack

Question 7

What is the primary purpose of a System Security Plan (SSP) within the RMF process?

Accepted Answer

To document how security controls are implemented, planned, or inherited for an information system

Answer

To formally authorize the operation of an information system by the AO

Answer

To assess the effectiveness of security controls and identify deficiencies

Answer

To enumerate all known system vulnerabilities and planned remediation dates