SSCP Security Architecture & Engineering 4 — Questions and Answers
Question 1: An organization implements FIPS 140-2 Level 3 validated HSMs for its cryptographic operations. What additional assurance does Level 3 provide over Level 2?
- Level 3 requires TEMPEST shielding for all hardware
- Level 3 requires physical tamper-resistance with response mechanisms that zeroize keys (Correct answer)
- Level 3 mandates formal mathematical proofs of algorithm correctness
- Level 3 requires the device to be certified by NSA
Correct answer: Level 3 requires physical tamper-resistance with response mechanisms that zeroize keys
FIPS 140-2 Level 3 adds physical tamper-resistance and response — the device must detect and respond to physical intrusion attempts by zeroizing sensitive parameters, beyond the tamper-evident coating required at Level 2.
Question 2: Which architecture pattern separates the data plane from the control plane to improve network security and manageability?
- Microservices Architecture
- Software-Defined Networking (SDN) (Correct answer)
- Defense in Depth
- Service-Oriented Architecture (SOA)
Correct answer: Software-Defined Networking (SDN)
Software-Defined Networking separates the control plane (routing decisions) from the data plane (packet forwarding), centralizing network control and enabling more granular security policy enforcement.
Question 3: What is the purpose of a security-focused 'orange book' (TCSEC) evaluation class of B3?
- Systems must have discretionary access controls and audit trails
- Systems must have a security kernel with formal mathematical proofs of policy model
- Systems must use mandatory access controls and a structured protection design (Correct answer)
- Systems must pass penetration testing by government-certified testers
Correct answer: Systems must use mandatory access controls and a structured protection design
TCSEC Class B3 (Security Domains) requires that the system's TCB be structured to exclude code not essential to security policy enforcement, with support for security administrators and system recovery.
Question 4: A security architect is concerned about electromagnetic emanations from workstations leaking sensitive data. Which standard addresses this threat?
- ISO 27001
- TEMPEST (EMSEC) (Correct answer)
- FIPS 140-2
- Common Criteria (ISO 15408)
Correct answer: TEMPEST (EMSEC)
TEMPEST (part of EMSEC — Emissions Security) addresses the risk of sensitive information being reconstructed from unintentional electromagnetic emissions from electronic equipment.
Question 5: In a cloud environment, which shared responsibility model component is ALWAYS the customer's responsibility regardless of service model (IaaS, PaaS, SaaS)?
- Operating system patching
- Network infrastructure security
- Data classification and protection (Correct answer)
- Hypervisor security
Correct answer: Data classification and protection
Regardless of cloud service model, the customer is always responsible for classifying and protecting their own data — the cloud provider never assumes ownership of the customer's data security decisions.
Question 6: Which type of side-channel attack exploits differences in the time taken to perform cryptographic operations?
- Power Analysis Attack
- Timing Attack (Correct answer)
- Fault Injection Attack
- Cache-Based Attack
Correct answer: Timing Attack
Timing attacks exploit measurable differences in the execution time of cryptographic operations (e.g., key comparisons) to infer information about secret keys or data.
Question 7: What does the concept of 'security by obscurity' primarily rely on?
- Encrypting all system configurations with strong algorithms
- Keeping the design or implementation of a security mechanism secret (Correct answer)
- Using proprietary protocols instead of open standards
- Limiting documentation access to cleared personnel only
Correct answer: Keeping the design or implementation of a security mechanism secret
Security by obscurity relies on keeping the design or workings of a security mechanism secret rather than on its inherent strength — this is considered a weak security practice when used as the sole defense.
SSCP Security Architecture & Engineering 4
An organization implements FIPS 140-2 Level 3 validated HSMs for its cryptographic operations.
What additional assurance does Level 3 provide over Level 2?