CAP Security Architecture & Engineering 4

Question 1

Which security architecture principle ensures that a compromised component cannot affect the security of the entire system?

Accepted Answer

Compartmentalization

Answer

Compartmentalization isolates system components so a breach in one area does not propagate to others.

Question 2

In the context of CAP, what does 'trustworthiness' of an information system primarily depend on?

Accepted Answer

Security functionality and assurance

Answer

Trustworthiness combines security functionality (what the system does) with assurance (confidence that it does it correctly).

Question 3

A system uses a reference monitor to mediate all access to objects. Which property ensures the reference monitor cannot be bypassed?

Accepted Answer

Non-bypassability

Answer

Non-bypassability means every access request must go through the reference monitor with no alternative path available.

Question 4

Which cryptographic mode of operation provides both confidentiality and authentication in a single pass?

Accepted Answer

GCM (Galois/Counter Mode)

Answer

GCM is an authenticated encryption mode that simultaneously provides confidentiality and integrity/authentication.

Question 5

An organization implements mandatory access control (MAC) based on data classification levels. Which model best describes this approach?

Accepted Answer

Bell-LaPadula Confidentiality Model

Answer

Bell-LaPadula enforces confidentiality using classification levels with 'no read up, no write down' rules.

(CAP) Certified Authorization Professional Practice Test