ISSAP - Information Systems Security Architecture Professional Architecting Cryptographic Solutions Questions and Answers

Question 1

A security architect is designing a system to protect sensitive data that will be stored for over 20 years. The architect is concerned about the future threat of quantum computing rendering current asymmetric encryption algorithms obsolete. Which of the following is the MOST important architectural principle to incorporate into the design to mitigate this long-term risk?

Accepted Answer

Cryptographic agility

Answer

Cryptographic agility is the design principle that allows an information system to easily and quickly replace or update its cryptographic algorithms, keys, and protocols without major disruptions. This is crucial for long-term data protection, as it prepares the system for the eventual transition to post-quantum cryptography (PQC) algorithms, which are resistant to attacks from quantum computers. While other options are valid security concepts, they do not directly address the need to adapt to future, unforeseen weaknesses in specific cryptographic algorithms.

Question 2

A financial services company is architecting a new cloud-native application. The security architect must ensure that sensitive customer data is protected both when stored in cloud object storage and when transmitted between microservices. Which combination of cryptographic solutions BEST addresses this requirement?

Accepted Answer

TLS for data in transit and AES-256 for data at rest.

Answer

The question requires protection for two distinct data states: data at rest (stored in object storage) and data in transit (transmitted between services). Transport Layer Security (TLS) is the standard protocol for encrypting data in transit over a network. Advanced Encryption Standard (AES) with a 256-bit key is a widely adopted, strong symmetric algorithm for encrypting data at rest. This combination directly and effectively addresses both requirements of the scenario.

Question 3

Which of the following is the PRIMARY reason for implementing a key rotation policy as part of a cryptographic key management lifecycle?

Accepted Answer

To limit the amount of data exposed if a key is compromised.

Answer

The primary security benefit of key rotation is to limit the 'blast radius' if a key is compromised. By regularly changing keys, the amount of data encrypted with any single key is reduced. Therefore, if an attacker compromises one key, they can only decrypt the data protected by that specific key during its limited crypto-period, not the entire history of the data.

Question 4

A security architect is evaluating a proposal for a new enterprise-wide key management system. A key requirement is to prevent a single administrator from having complete control over the cryptographic keys, thereby preventing a single point of compromise. Which architectural concept should the architect ensure is implemented?

Accepted Answer

Split knowledge and separation of duties

Answer

Split knowledge and separation of duties are core principles in key management that ensure no single person has unilateral access to or control over the entire key management process. Split knowledge involves dividing a key or access to keys among multiple individuals, while separation of duties ensures that different stages of the key lifecycle (e.g., generation, use, revocation) are controlled by different people or roles. This prevents a single compromised administrator from compromising the entire cryptographic system.

Question 5

When architecting a cryptographic solution for a multi-cloud environment, what is the most significant challenge a security architect must address regarding key management?

Accepted Answer

Maintaining consistent key management policies and control across different providers.

Answer

Each cloud service provider (CSP) has its own native key management service (KMS) with different APIs, policies, and capabilities. In a multi-cloud architecture, maintaining a consistent and centralized approach to key management policies, access control, and auditing becomes a major challenge. An architect must decide between using native tools, which leads to fragmented control, or implementing a third-party or hybrid KMS to achieve uniform governance across all cloud environments.

ISSAP - Information Systems Security Architecture Professional Practice Test

ISSAP - Information Systems Security Architecture Professional Practice Test

ISSAP - Information Systems Security Architecture Professional Architecting Cryptographic Solutions Questions and Answers