CAP Security Architecture & Engineering 5

Question 1

A federal system must ensure that hardware components are from trusted suppliers. Which program directly addresses this supply chain concern?

Accepted Answer

NIST SP 800-161 Supply Chain Risk Management

Answer

NIST SP 800-161 provides guidance on supply chain risk management practices for federal information systems.

Question 2

Which security engineering concept involves deliberately introducing a weakness into a system to detect attackers?

Accepted Answer

Honeypot deployment

Answer

Honeypots are decoy systems designed to attract and detect attackers while appearing to be legitimate targets.

Question 3

When applying security engineering principles, 'economy of mechanism' primarily means:

Accepted Answer

Keeping security designs as simple as possible

Answer

Economy of mechanism means keeping security designs simple and small to reduce the attack surface and facilitate verification.

Question 4

A system architect needs to protect data that remains sensitive even after the system is decommissioned. Which control addresses this long-term concern?

Accepted Answer

Media sanitization procedures

Answer

Media sanitization (e.g., per NIST SP 800-88) ensures data cannot be recovered after system decommissioning.

Question 5

Which type of security control prevents a security incident from occurring in the first place?

Accepted Answer

Preventive control

Answer

Preventive controls stop security incidents before they occur, such as firewalls, encryption, and access controls.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Security Architecture & Engineering 5