CISSP Security Architecture 2 — Questions and Answers
Question 1: Which security architecture principle ensures that a compromised component cannot be used to gain unauthorized access to other components?
- Defense in depth
- Isolation and containment (Correct answer)
- Least privilege
- Fail-safe defaults
Correct answer: Isolation and containment
Isolation and containment limits the blast radius of a compromise by preventing lateral movement between components.
Question 2: In the Zachman Framework, which column addresses the question 'How does the system work?'
- Data column
- Function column (Correct answer)
- Network column
- People column
Correct answer: Function column
The Function column in the Zachman Framework addresses processes and how the system operates.
Question 3: A system that defaults to denying access when an error occurs is implementing which security principle?
- Fail-secure (Correct answer)
- Open design
- Economy of mechanism
- Complete mediation
Correct answer: Fail-secure
Fail-secure (or fail-safe) ensures systems default to a secure state — denying access — upon failure.
Question 4: Which of the following best describes a Reference Monitor?
- A hardware module that encrypts memory
- An abstract machine that mediates all access between subjects and objects (Correct answer)
- A firewall rule set enforcing network policy
- A software agent that monitors user behavior
Correct answer: An abstract machine that mediates all access between subjects and objects
A Reference Monitor is an abstract machine concept that intercepts every access attempt between subjects and objects to enforce policy.
Question 5: The Clark-Wilson integrity model primarily addresses which type of environment?
- Military multilevel security
- Commercial transaction integrity (Correct answer)
- Network perimeter defense
- Physical access control
Correct answer: Commercial transaction integrity
Clark-Wilson was designed for commercial environments, ensuring data integrity through well-formed transactions and separation of duties.
Question 6: Which architectural component validates that all security controls are properly tested and verified before deployment?
- Security baseline
- Trusted Computing Base (TCB) (Correct answer)
- Security kernel
- Evaluation Assurance Level (EAL)
Correct answer: Trusted Computing Base (TCB)
The Trusted Computing Base encompasses all hardware, software, and firmware that enforce the system security policy.
Question 7: In a zero trust architecture, what is the role of the Policy Decision Point (PDP)?
- Encrypts data in transit between endpoints
- Evaluates access requests against policy and grants or denies access (Correct answer)
- Monitors network traffic for anomalies
- Stores and manages cryptographic keys
Correct answer: Evaluates access requests against policy and grants or denies access
The PDP evaluates access requests using identity, context, and policy to make authorization decisions in a zero trust model.
CISSP Security Architecture 2
Which security architecture principle ensures that a compromised component cannot be used to gain unauthorized access to other components?