CAP Security Architecture & Engineering 1 — Questions and Answers
Question 1: Which security model is primarily designed to prevent unauthorized data disclosure by enforcing confidentiality based on classification labels?
- Biba Integrity Model
- Bell-LaPadula Confidentiality Model (Correct answer)
- Clark-Wilson Model
- Brewer-Nash Model
Correct answer: Bell-LaPadula Confidentiality Model
The Bell-LaPadula model enforces confidentiality by ensuring subjects cannot read data at a higher classification level (no read up) and cannot write to a lower classification level (no write down).
Question 2: In the context of CAP and the RMF, what does the principle of 'least privilege' require?
- Users receive only the minimum access rights necessary to perform their job functions (Correct answer)
- Systems are designed with the fewest possible security controls
- Only privileged administrators can access classified information
- Security policies must be kept as simple as possible
Correct answer: Users receive only the minimum access rights necessary to perform their job functions
Least privilege requires that users, processes, and systems are granted only the minimum permissions necessary to accomplish their authorized tasks, reducing the attack surface.
Question 3: Which NIST Special Publication provides the catalog of security and privacy controls for federal information systems and organizations?
- NIST SP 800-37
- NIST SP 800-53 (Correct answer)
- NIST SP 800-30
- NIST SP 800-137
Correct answer: NIST SP 800-53
NIST SP 800-53 provides a comprehensive catalog of security and privacy controls that federal agencies select and implement to protect their information systems.
Question 4: What is the primary purpose of defining an 'authorization boundary' in information system architecture?
- To define the physical perimeter of the data center
- To delineate the scope of the information system for authorization purposes, including all components to be authorized (Correct answer)
- To separate classified from unclassified networks at the firewall
- To establish the geographic boundary for data storage locations
Correct answer: To delineate the scope of the information system for authorization purposes, including all components to be authorized
The authorization boundary identifies the system scope — all hardware, software, firmware, and people within that boundary are subject to the same authorization decision.
Question 5: Which security architecture principle ensures that no single individual can complete a sensitive or critical process alone?
- Least privilege
- Need-to-know
- Separation of duties (Correct answer)
- Defense in depth
Correct answer: Separation of duties
Separation of duties divides critical tasks among multiple individuals so that no one person can carry out a sensitive function alone, reducing fraud and error risk.
Question 6: What does 'defense in depth' mean as a security architecture strategy?
- Deploying multiple layers of security controls throughout an information system so that failure of one does not compromise overall security (Correct answer)
- Implementing a single comprehensive security perimeter around the network
- Using deep packet inspection at all network ingress and egress points
- Building underground, hardened data centers resistant to physical attack
Correct answer: Deploying multiple layers of security controls throughout an information system so that failure of one does not compromise overall security
Defense in depth applies multiple, overlapping security controls so that if one layer fails or is bypassed, additional layers continue to provide protection.
Question 7: What is the primary purpose of a System Security Plan (SSP) within the RMF process?
- To document how security controls are implemented, planned, or inherited for an information system (Correct answer)
- To formally authorize the operation of an information system by the AO
- To assess the effectiveness of security controls and identify deficiencies
- To enumerate all known system vulnerabilities and planned remediation dates
Correct answer: To document how security controls are implemented, planned, or inherited for an information system
The SSP describes the system environment, system boundaries, and the security controls in place or planned, serving as the authoritative document for the system's security posture.
CAP Security Architecture & Engineering 1
Which security model is primarily designed to prevent unauthorized data disclosure by enforcing confidentiality based on classification labels?