SSCP Security Architecture & Engineering 3

Question 1

Which of the following cryptographic attacks targets the mathematical relationship between a public key and its corresponding private key?

Accepted Answer

Factoring Attack

Answer

Factoring attacks, such as those targeting RSA, attempt to factor the large composite number (modulus) in a public key to derive the corresponding private key.

Question 2

In a multilevel security system using the Bell-LaPadula model, what does the 'star property' (*-property) enforce?

Accepted Answer

Subjects cannot write to objects at a lower classification level

Answer

The *-property (star property) in Bell-LaPadula prevents write-down, meaning a subject cannot write to an object with a lower sensitivity label, preventing data leakage to lower levels.

Question 3

A company uses HSMs to protect its PKI root CA keys. What is the PRIMARY security benefit of using an HSM for this purpose?

Accepted Answer

HSMs store private keys in tamper-resistant hardware that prevents key extraction

Answer

Hardware Security Modules store cryptographic keys in tamper-resistant hardware where keys cannot be extracted in plaintext, protecting the most sensitive PKI material from theft.

Question 4

What type of cryptanalysis attack is performed when an attacker has access to both plaintext and its corresponding ciphertext?

Accepted Answer

Known-Plaintext Attack

Answer

A known-plaintext attack occurs when the attacker possesses pairs of plaintext and the corresponding ciphertext and uses them to deduce the encryption key or algorithm.

Question 5

Which security architecture principle states that each component of a system should be able to function with the minimum access necessary to perform its role?

Accepted Answer

Least Privilege

Answer

Least privilege dictates that each user, process, or system component should operate with only the minimum permissions needed to perform its function, limiting the blast radius of a compromise.

(SSCP) Systems Security Certified Practitioner Exam Practice Test

(SSCP) Systems Security Certified Practitioner Exam Practice Test

SSCP Security Architecture & Engineering 3