CAP Security Architecture & Engineering 3

Question 1

What does 'non-repudiation' provide in information system security architecture?

Accepted Answer

Assurance that an entity cannot later deny having performed a specific action or transaction

Answer

Non-repudiation provides proof of origin or delivery of data so that neither sender nor receiver can later deny involvement in a transaction, often implemented via digital signatures.

Question 2

Which principle in secure design states that the security of a system should not depend on the secrecy of its design or implementation?

Accepted Answer

Open design

Answer

Open design, a Saltzer and Schroeder principle, holds that security mechanisms should be publicly scrutinizable — security should come from key secrecy, not algorithm or design secrecy.

Question 3

What is the purpose of 'tailoring' security controls during the RMF Select step?

Accepted Answer

Adjusting the baseline controls by applying scoping guidance, adding compensating controls, or specifying parameter values to match system-specific conditions

Answer

Tailoring allows organizations to adjust the baseline controls based on organizational policies, risk assessments, and operational requirements while documenting all deviations.

Question 4

In secure system architecture, what does 'data-at-rest' protection primarily address?

Accepted Answer

Encryption and access controls for data stored on physical media, databases, or file systems

Answer

Data-at-rest protection focuses on encrypting and controlling access to stored data — on hard drives, SSDs, tapes, or databases — when data is not actively being transmitted or processed.

Question 5

Which access control model evaluates multiple attributes (user, resource, environment) dynamically to make access decisions?

Accepted Answer

Attribute-Based Access Control (ABAC)

Answer

ABAC evaluates attributes of the subject, object, and environment at the time of each access request, enabling fine-grained, context-aware access decisions beyond static role assignments.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Security Architecture & Engineering 3