CISSP Security Architecture 4

Question 1

Which security architecture concept requires every access request to be fully validated, regardless of the requester's previous authentication status?

Accepted Answer

Complete mediation

Answer

Complete mediation requires every access to every object to be checked against access control policy, with no caching of permissions.

Question 2

In the context of secure hardware, what does a Trusted Platform Module (TPM) primarily provide?

Accepted Answer

Secure storage of cryptographic keys and platform integrity measurements

Answer

A TPM is a dedicated chip that provides secure key storage, platform integrity attestation via PCRs, and cryptographic functions.

Question 3

Which approach to system design creates multiple layers of redundant security controls so that failure of one does not result in a breach?

Accepted Answer

Defense in depth

Answer

Defense in depth implements layered security controls so an attacker must defeat multiple independent mechanisms to succeed.

Question 4

An application uses a hardware security module (HSM) to perform all cryptographic operations. What is the primary security advantage?

Accepted Answer

Private keys never leave the tamper-resistant hardware boundary

Answer

HSMs ensure private keys are generated and used inside tamper-resistant hardware, preventing key extraction even by privileged administrators.

Question 5

Which security architecture pattern uses a single entry and exit point to enforce security policy on all network traffic?

Accepted Answer

Choke point

Answer

A choke point funnels all traffic through a single controlled gateway, making it easier to monitor and enforce security policies.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Security Architecture 4