CAP Security Architecture & Engineering

Question 1

Which security model is primarily designed to prevent unauthorized data disclosure by enforcing confidentiality based on classification labels?

Accepted Answer

Bell-LaPadula Confidentiality Model

Answer

The Bell-LaPadula model enforces confidentiality by ensuring subjects cannot read data at a higher classification level (no read up) and cannot write to a lower classification level (no write down).

Question 2

In the context of CAP and the RMF, what does the principle of 'least privilege' require?

Accepted Answer

Users receive only the minimum access rights necessary to perform their job functions

Answer

Least privilege requires that users, processes, and systems are granted only the minimum permissions necessary to accomplish their authorized tasks, reducing the attack surface.

Question 3

Which NIST Special Publication provides the catalog of security and privacy controls for federal information systems and organizations?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-53 provides a comprehensive catalog of security and privacy controls that federal agencies select and implement to protect their information systems.

Question 4

What is the primary purpose of defining an 'authorization boundary' in information system architecture?

Accepted Answer

To delineate the scope of the information system for authorization purposes, including all components to be authorized

Answer

The authorization boundary identifies the system scope — all hardware, software, firmware, and people within that boundary are subject to the same authorization decision.

Question 5

Which security architecture principle ensures that no single individual can complete a sensitive or critical process alone?

Accepted Answer

Separation of duties

Answer

Separation of duties divides critical tasks among multiple individuals so that no one person can carry out a sensitive function alone, reducing fraud and error risk.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Security Architecture & Engineering