CISSP Security Architecture 3 — Questions and Answers
Question 1: Which security model uses a lattice structure to define information flow between security levels?
- Graham-Denning model
- Bell-LaPadula model (Correct answer)
- Biba model
- Chinese Wall model
Correct answer: Bell-LaPadula model
Bell-LaPadula uses a lattice of security classifications to enforce mandatory access controls based on confidentiality.
Question 2: A microkernel architecture improves security primarily by:
- Running all OS services in privileged kernel mode
- Minimizing the amount of code running in the most privileged mode (Correct answer)
- Encrypting all inter-process communication
- Requiring multi-factor authentication for all system calls
Correct answer: Minimizing the amount of code running in the most privileged mode
Microkernels keep the kernel minimal, moving services to user space to reduce the attack surface of privileged code.
Question 3: Which concept describes an architecture where processing occurs at the network edge rather than centralized data centers?
- Cloud bursting
- Edge computing (Correct answer)
- Software-defined networking
- Hyperconverged infrastructure
Correct answer: Edge computing
Edge computing moves compute resources closer to data sources, reducing latency and centralization risks.
Question 4: The principle of 'open design' in security architecture means:
- Security controls are publicly documented so attackers cannot exploit unknown weaknesses
- System security should not depend on the secrecy of its design (Correct answer)
- All source code must be open-source for community review
- Encryption algorithms must use publicly known keys
Correct answer: System security should not depend on the secrecy of its design
Open design means the security of a system should not rely on keeping its design secret — only keys/credentials should be secret.
Question 5: In Common Criteria, a Security Target (ST) is best described as:
- A generic template of security requirements for a product class
- A document specifying the security claims for a specific product under evaluation (Correct answer)
- A list of all known vulnerabilities in a product
- The final certification report issued by an evaluation lab
Correct answer: A document specifying the security claims for a specific product under evaluation
A Security Target details the specific security properties and claims for the product being evaluated, often based on a Protection Profile.
Question 6: Which of the following attacks targets the hypervisor in a virtualized environment?
- Container escape
- VM sprawl
- Hyperjacking (Correct answer)
- Side-channel attack
Correct answer: Hyperjacking
Hyperjacking involves compromising or replacing the hypervisor to gain control over all guest virtual machines.
Question 7: A security architect wants to ensure that no single administrator can make unauthorized changes to the system undetected. Which control best satisfies this?
- Role-based access control
- Dual control / two-person integrity (Correct answer)
- Mandatory access control
- Privileged access workstations
Correct answer: Dual control / two-person integrity
Dual control (two-person integrity) requires two authorized individuals to perform sensitive actions, preventing unilateral unauthorized changes.
CISSP Security Architecture 3
Which security model uses a lattice structure to define information flow between security levels?