CISSP Security Architecture 3

Question 1

Which security model uses a lattice structure to define information flow between security levels?

Accepted Answer

Bell-LaPadula model

Answer

Bell-LaPadula uses a lattice of security classifications to enforce mandatory access controls based on confidentiality.

Question 2

A microkernel architecture improves security primarily by:

Accepted Answer

Minimizing the amount of code running in the most privileged mode

Answer

Microkernels keep the kernel minimal, moving services to user space to reduce the attack surface of privileged code.

Question 3

Which concept describes an architecture where processing occurs at the network edge rather than centralized data centers?

Accepted Answer

Edge computing

Answer

Edge computing moves compute resources closer to data sources, reducing latency and centralization risks.

Question 4

The principle of 'open design' in security architecture means:

Accepted Answer

System security should not depend on the secrecy of its design

Answer

Open design means the security of a system should not rely on keeping its design secret — only keys/credentials should be secret.

Question 5

In Common Criteria, a Security Target (ST) is best described as:

Accepted Answer

A document specifying the security claims for a specific product under evaluation

Answer

A Security Target details the specific security properties and claims for the product being evaluated, often based on a Protection Profile.

CISSP - Certified Information Systems Security Professional Practice Test