SSCP Security Architecture & Engineering 3 — Questions and Answers
Question 1: Which of the following cryptographic attacks targets the mathematical relationship between a public key and its corresponding private key?
- Birthday Attack
- Factoring Attack (Correct answer)
- Rainbow Table Attack
- Replay Attack
Correct answer: Factoring Attack
Factoring attacks, such as those targeting RSA, attempt to factor the large composite number (modulus) in a public key to derive the corresponding private key.
Question 2: In a multilevel security system using the Bell-LaPadula model, what does the 'star property' (*-property) enforce?
- Subjects cannot read objects at a higher classification level
- Subjects cannot write to objects at a lower classification level (Correct answer)
- All write operations require explicit approval from a security officer
- Subjects must authenticate before accessing any classified object
Correct answer: Subjects cannot write to objects at a lower classification level
The *-property (star property) in Bell-LaPadula prevents write-down, meaning a subject cannot write to an object with a lower sensitivity label, preventing data leakage to lower levels.
Question 3: A company uses HSMs to protect its PKI root CA keys. What is the PRIMARY security benefit of using an HSM for this purpose?
- HSMs provide faster certificate issuance than software-based solutions
- HSMs store private keys in tamper-resistant hardware that prevents key extraction (Correct answer)
- HSMs automatically renew certificates before expiration
- HSMs enforce certificate revocation across all endpoints
Correct answer: HSMs store private keys in tamper-resistant hardware that prevents key extraction
Hardware Security Modules store cryptographic keys in tamper-resistant hardware where keys cannot be extracted in plaintext, protecting the most sensitive PKI material from theft.
Question 4: What type of cryptanalysis attack is performed when an attacker has access to both plaintext and its corresponding ciphertext?
- Ciphertext-Only Attack
- Known-Plaintext Attack (Correct answer)
- Chosen-Plaintext Attack
- Adaptive Chosen-Ciphertext Attack
Correct answer: Known-Plaintext Attack
A known-plaintext attack occurs when the attacker possesses pairs of plaintext and the corresponding ciphertext and uses them to deduce the encryption key or algorithm.
Question 5: Which security architecture principle states that each component of a system should be able to function with the minimum access necessary to perform its role?
- Economy of Mechanism
- Least Privilege (Correct answer)
- Complete Mediation
- Open Design
Correct answer: Least Privilege
Least privilege dictates that each user, process, or system component should operate with only the minimum permissions needed to perform its function, limiting the blast radius of a compromise.
Question 6: A developer stores session tokens in a browser's localStorage instead of httpOnly cookies. What security risk does this introduce?
- Session tokens become susceptible to CSRF attacks
- Session tokens become accessible to JavaScript, enabling XSS-based theft (Correct answer)
- Session tokens are transmitted unencrypted over the network
- Session tokens expire too quickly due to storage limitations
Correct answer: Session tokens become accessible to JavaScript, enabling XSS-based theft
Data stored in localStorage is accessible to any JavaScript running on the page, meaning a successful XSS attack can steal session tokens and hijack user sessions.
Question 7: Which of the following best describes the security concept of 'complete mediation'?
- All cryptographic operations must use FIPS 140-2 validated algorithms
- Every access to every object must be checked against the access control policy (Correct answer)
- Security controls must be reviewed by an independent third party
- All network traffic must pass through a centralized security gateway
Correct answer: Every access to every object must be checked against the access control policy
Complete mediation means that every access attempt to every object is verified against the access control policy — no access is assumed authorized based on past permission grants.
SSCP Security Architecture & Engineering 3
Which of the following cryptographic attacks targets the mathematical relationship between a public key and its corresponding private key?