ISC2 CISSP Architecture Vulnerabilities Cloud ICS IoT And Virtualization Practice Test

 

3 Security Architecture and Engineering • 26 original questions

This CISSP practice test focuses on architecture vulnerabilities cloud ics iot and virtualization through original scenario-based questions aligned to the current ISC2 CISSP Certification Exam Outline. Use the full ExamSnap CISSP collection for practice across all eight domains. For broader exam preparation, review the ISC2 CISSP Exam Dumps page.

Instructions: Select the best answer for each question. Review the explanation after answering; each distractor includes a reason it is not the best choice for that scenario.

Question 1

During a risk workshop for the industrial control network, the team identifies Serverless as the deciding issue. The IAM architect is expected to address the control objective without replacing governance with a technology-only shortcut. What is the MOST appropriate course of action? The architecture contains 39 separately managed trust zones or platform components.

1. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
2. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
3. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
4. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.

Correct answer: A

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Serverless without replacing governance with a technology-only shortcut.

Option review:

A: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Serverless without replacing governance with a technology-only shortcut.

B: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Serverless in this scenario.

C: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Serverless in this scenario.

D: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Serverless in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 2

A control owner at Southridge Media proposes a quick technical fix for Embedded systems in the research data repository. The application security architect must address the control objective while keeping the process defensible to auditors and business owners. What should happen FIRST? The architecture contains 56 separately managed trust zones or platform components.

1. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
2. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Embedded systems while keeping the process defensible to auditors and business owners.

Option review:

A: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Embedded systems in this scenario.

B: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Embedded systems in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Embedded systems while keeping the process defensible to auditors and business owners.

D: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Embedded systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 3

Adventure Works is standardizing security across several business units. The payment processing service raises a question about High-Performance Computing systems. The incident response manager needs to address the control objective while minimizing irreversible action until facts and authority are established. Which action provides the BEST governance and security outcome? The architecture contains 73 separately managed trust zones or platform components.

1. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
2. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
3. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
4. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.

Correct answer: B

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses High-Performance Computing systems while minimizing irreversible action until facts and authority are established.

Option review:

A: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address High-Performance Computing systems in this scenario.

B: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses High-Performance Computing systems while minimizing irreversible action until facts and authority are established.

C: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address High-Performance Computing systems in this scenario.

D: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address High-Performance Computing systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 4

During a network segmentation redesign, VanArsdel Energy asks the security governance lead to address Edge computing systems for its software delivery pipeline. The requirement is to address the control objective while preserving evidence needed for later review. What should the organization do FIRST? The architecture contains 90 separately managed trust zones or platform components.

1. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
2. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
3. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
4. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.

Correct answer: B

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Edge computing systems while preserving evidence needed for later review.

Option review:

A: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Edge computing systems in this scenario.

B: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Edge computing systems while preserving evidence needed for later review.

C: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Edge computing systems in this scenario.

D: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Edge computing systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 5

Northwind Health is revising controls for its AI-assisted customer service platform. A review highlights Virtualized systems. The IAM architect must address the control objective without granting broader privilege than the business need requires. Which action is the BEST next step? The architecture contains 16 separately managed trust zones or platform components.

1. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
2. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Virtualized systems without granting broader privilege than the business need requires.

Option review:

A: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Virtualized systems in this scenario.

B: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Virtualized systems in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Virtualized systems without granting broader privilege than the business need requires.

D: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Virtualized systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 6

An auditor asks Coho Insurance to demonstrate how it handles Client-based systems in the global collaboration platform. The application security architect must address the control objective without creating a new single point of failure. Which response is MOST appropriate? The architecture contains 33 separately managed trust zones or platform components.

1. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
2. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
3. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
4. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.

Correct answer: B

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Client-based systems without creating a new single point of failure.

Option review:

A: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Client-based systems in this scenario.

B: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Client-based systems without creating a new single point of failure.

C: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Client-based systems in this scenario.

D: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Client-based systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 7

After a business change, A. Datum Analytics discovers that Server-based systems is not handled consistently for the e-commerce application. The incident response manager needs to address the control objective while ensuring that emergency access cannot become permanent access. Which recommendation BEST addresses the issue? The architecture contains 50 separately managed trust zones or platform components.

1. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
2. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Server-based systems while ensuring that emergency access cannot become permanent access.

Option review:

A: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Server-based systems in this scenario.

B: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. That action can be useful in a different security decision, but it does not most directly address Server-based systems in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Server-based systems while ensuring that emergency access cannot become permanent access.

D: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Server-based systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 8

Blue Yonder Airlines is preparing a security decision for the clinical records environment. The decision involves Database systems. The security governance lead must address the control objective while allowing independent verification of the control outcome. Which option BEST reflects CISSP-level security practice? The architecture contains 67 separately managed trust zones or platform components.

1. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
2. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
3. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Database systems while allowing independent verification of the control outcome.

Option review:

A: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Database systems in this scenario.

B: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Database systems in this scenario.

C: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Database systems in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Database systems while allowing independent verification of the control outcome.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 9

During a risk workshop for the remote access service, the team identifies Cryptographic systems as the deciding issue. The IAM architect is expected to address the control objective while accounting for third-party and lifecycle dependencies. What is the MOST appropriate course of action? The architecture contains 84 separately managed trust zones or platform components.

1. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
2. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
3. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
4. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.

Correct answer: B

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cryptographic systems while accounting for third-party and lifecycle dependencies.

Option review:

A: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Cryptographic systems in this scenario.

B: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cryptographic systems while accounting for third-party and lifecycle dependencies.

C: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Cryptographic systems in this scenario.

D: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Cryptographic systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 10

A control owner at Tailspin Logistics proposes a quick technical fix for Industrial Control Systems (ICS) in the customer identity platform. The application security architect must address the control objective while maintaining the organization’s stated risk appetite. What should happen FIRST? The architecture contains 10 separately managed trust zones or platform components.

1. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Industrial Control Systems (ICS) while maintaining the organization’s stated risk appetite.

Option review:

A: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Industrial Control Systems (ICS) in this scenario.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Industrial Control Systems (ICS) in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Industrial Control Systems (ICS) while maintaining the organization’s stated risk appetite.

D: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Industrial Control Systems (ICS) in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 11

Alpine Sports is standardizing security across several business units. The data analytics lake raises a question about Cloud-based systems including SaaS, IaaS, and PaaS. The incident response manager needs to address the control objective while meeting the business objective with the least unnecessary operational complexity. Which action provides the BEST governance and security outcome? The architecture contains 27 separately managed trust zones or platform components.

1. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
2. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
3. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cloud-based systems including SaaS, IaaS, and PaaS while meeting the business objective with the least unnecessary operational complexity.

Option review:

A: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Cloud-based systems including SaaS, IaaS, and PaaS in this scenario.

B: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Cloud-based systems including SaaS, IaaS, and PaaS in this scenario.

C: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Cloud-based systems including SaaS, IaaS, and PaaS in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cloud-based systems including SaaS, IaaS, and PaaS while meeting the business objective with the least unnecessary operational complexity.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 12

During a data-governance workshop, Fabrikam Manufacturing asks the security governance lead to address Distributed systems for its branch-office network. The requirement is to address the control objective while keeping the control sustainable for normal operations. What should the organization do FIRST? The architecture contains 44 separately managed trust zones or platform components.

1. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
2. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
3. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Distributed systems while keeping the control sustainable for normal operations.

Option review:

A: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. That action can be useful in a different security decision, but it does not most directly address Distributed systems in this scenario.

B: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Distributed systems in this scenario.

C: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Distributed systems in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Distributed systems while keeping the control sustainable for normal operations.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 13

Trey Research is revising controls for its industrial control network. A review highlights Internet of Things (IoT). The IAM architect must address the control objective while ensuring the decision can be repeated consistently across business units. Which action is the BEST next step? The architecture contains 61 separately managed trust zones or platform components.

1. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
2. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
3. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.
4. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.

Correct answer: A

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Internet of Things (IoT) while ensuring the decision can be repeated consistently across business units.

Option review:

A: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Internet of Things (IoT) while ensuring the decision can be repeated consistently across business units.

B: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Internet of Things (IoT) in this scenario.

C: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Internet of Things (IoT) in this scenario.

D: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Internet of Things (IoT) in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 14

An auditor asks Margie Travel to demonstrate how it handles Microservices and APIs in the research data repository. The application security architect must address the control objective while preserving clear accountability and audit evidence. Which response is MOST appropriate? The architecture contains 78 separately managed trust zones or platform components.

1. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
2. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Microservices and APIs while preserving clear accountability and audit evidence.

Option review:

A: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Microservices and APIs in this scenario.

B: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Microservices and APIs in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Microservices and APIs while preserving clear accountability and audit evidence.

D: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Microservices and APIs in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 15

After a business change, Wide World Importers discovers that Containerization is not handled consistently for the payment processing service. The incident response manager needs to address the control objective while protecting sensitive data throughout the change. Which recommendation BEST addresses the issue? The architecture contains 4 separately managed trust zones or platform components.

1. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Use the platform security capability that establishes the required trust property, such as hardware-backed key protection, memory isolation, or cryptographic enforcement.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Containerization while protecting sensitive data throughout the change.

Option review:

A: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Containerization in this scenario.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Containerization in this scenario.

C: Built-in system capabilities can provide stronger trust anchors when they directly support the required security property. That action can be useful in a different security decision, but it does not most directly address Containerization in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Containerization while protecting sensitive data throughout the change.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 16

Bellows University is preparing a security decision for the software delivery pipeline. The decision involves Serverless. The security governance lead must address the control objective while preserving availability of the critical business service. Which option BEST reflects CISSP-level security practice? The architecture contains 21 separately managed trust zones or platform components.

1. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
2. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
3. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
4. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.

Correct answer: A

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Serverless while preserving availability of the critical business service.

Option review:

A: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Serverless while preserving availability of the critical business service.

B: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Serverless in this scenario.

C: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Serverless in this scenario.

D: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Serverless in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 17

During a risk workshop for the AI-assisted customer service platform, the team identifies Client-based systems as the deciding issue. The IAM architect is expected to address the control objective without replacing governance with a technology-only shortcut. What is the MOST appropriate course of action? The architecture contains 38 separately managed trust zones or platform components.

1. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
2. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.
3. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
4. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.

Correct answer: A

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Client-based systems without replacing governance with a technology-only shortcut.

Option review:

A: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Client-based systems without replacing governance with a technology-only shortcut.

B: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Client-based systems in this scenario.

C: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Client-based systems in this scenario.

D: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Client-based systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 18

A control owner at Humongous Insurance proposes a quick technical fix for Server-based systems in the global collaboration platform. The application security architect must address the control objective while keeping the process defensible to auditors and business owners. What should happen FIRST? The architecture contains 55 separately managed trust zones or platform components.

1. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
2. Identify the cryptanalytic or credential attack class and mitigate the exploited weakness rather than merely increasing unrelated perimeter controls.
3. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Server-based systems while keeping the process defensible to auditors and business owners.

Option review:

A: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Server-based systems in this scenario.

B: Cryptographic and authentication attacks target specific weaknesses in algorithms, implementations, keys, protocols, or credentials. That action can be useful in a different security decision, but it does not most directly address Server-based systems in this scenario.

C: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Server-based systems in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Server-based systems while keeping the process defensible to auditors and business owners.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 19

Woodgrove Bank is standardizing security across several business units. The e-commerce application raises a question about Database systems. The incident response manager needs to address the control objective while minimizing irreversible action until facts and authority are established. Which action provides the BEST governance and security outcome? The architecture contains 72 separately managed trust zones or platform components.

1. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.
2. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Database systems while minimizing irreversible action until facts and authority are established.

Option review:

A: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Database systems in this scenario.

B: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Database systems in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Database systems while minimizing irreversible action until facts and authority are established.

D: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Database systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 20

During a regulatory readiness assessment, Relecloud Systems asks the security governance lead to address Cryptographic systems for its clinical records environment. The requirement is to address the control objective while preserving evidence needed for later review. What should the organization do FIRST? The architecture contains 89 separately managed trust zones or platform components.

1. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
2. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
3. Integrate security requirements, verification, change control, maintenance, and secure disposal throughout the information-system lifecycle.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cryptographic systems while preserving evidence needed for later review.

Option review:

A: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Cryptographic systems in this scenario.

B: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Cryptographic systems in this scenario.

C: Security decisions must be maintained and revalidated as the system moves from requirements through retirement. That action can be useful in a different security decision, but it does not most directly address Cryptographic systems in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cryptographic systems while preserving evidence needed for later review.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 21

Contoso Financial is revising controls for its remote access service. A review highlights Industrial Control Systems (ICS). The IAM architect must address the control objective without granting broader privilege than the business need requires. Which action is the BEST next step? The architecture contains 15 separately managed trust zones or platform components.

1. Derive controls from explicit system security requirements, threat assumptions, and assurance needs before choosing products.
2. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Industrial Control Systems (ICS) without granting broader privilege than the business need requires.

Option review:

A: Control selection is defensible when it traces to requirements and risk rather than vendor preference. That action can be useful in a different security decision, but it does not most directly address Industrial Control Systems (ICS) in this scenario.

B: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Industrial Control Systems (ICS) in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Industrial Control Systems (ICS) without granting broader privilege than the business need requires.

D: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Industrial Control Systems (ICS) in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 22

An auditor asks Lucerne Publishing to demonstrate how it handles Cloud-based systems including SaaS, IaaS, and PaaS in the customer identity platform. The application security architect must address the control objective without creating a new single point of failure. Which response is MOST appropriate? The architecture contains 32 separately managed trust zones or platform components.

1. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
2. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
3. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
4. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.

Correct answer: A

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cloud-based systems including SaaS, IaaS, and PaaS without creating a new single point of failure.

Option review:

A: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Cloud-based systems including SaaS, IaaS, and PaaS without creating a new single point of failure.

B: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Cloud-based systems including SaaS, IaaS, and PaaS in this scenario.

C: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Cloud-based systems including SaaS, IaaS, and PaaS in this scenario.

D: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Cloud-based systems including SaaS, IaaS, and PaaS in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 23

After a business change, Lamna Healthcare discovers that Distributed systems is not handled consistently for the data analytics lake. The incident response manager needs to address the control objective while ensuring that emergency access cannot become permanent access. Which recommendation BEST addresses the issue? The architecture contains 49 separately managed trust zones or platform components.

1. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
2. Use layered facility, environmental, fire, utility, power, and restricted-area controls to remove single points of physical failure.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Grant a small operations group broad administrator access so they can work around the issue whenever it appears.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Distributed systems while ensuring that emergency access cannot become permanent access.

Option review:

A: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Distributed systems in this scenario.

B: Data-center security includes environmental resilience and life-safety controls as well as access barriers. That action can be useful in a different security decision, but it does not most directly address Distributed systems in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Distributed systems while ensuring that emergency access cannot become permanent access.

D: Broad standing privilege conflicts with least privilege and treats symptoms rather than fixing the underlying control design. That action can be useful in a different security decision, but it does not most directly address Distributed systems in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 24

Fourth Coffee is preparing a security decision for the branch-office network. The decision involves Internet of Things (IoT). The security governance lead must address the control objective while allowing independent verification of the control outcome. Which option BEST reflects CISSP-level security practice? The architecture contains 66 separately managed trust zones or platform components.

1. Document the risk as accepted without identifying an accountable risk owner or evaluating residual impact.
2. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.
3. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.
4. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.

Correct answer: C

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Internet of Things (IoT) while allowing independent verification of the control outcome.

Option review:

A: Risk acceptance is a business decision that requires informed ownership and cannot substitute for analysis. That action can be useful in a different security decision, but it does not most directly address Internet of Things (IoT) in this scenario.

B: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Internet of Things (IoT) in this scenario.

C: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Internet of Things (IoT) while allowing independent verification of the control outcome.

D: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Internet of Things (IoT) in this scenario.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 25

During a risk workshop for the industrial control network, the team identifies Microservices and APIs as the deciding issue. The IAM architect is expected to address the control objective while accounting for third-party and lifecycle dependencies. What is the MOST appropriate course of action? The architecture contains 83 separately managed trust zones or platform components.

1. Select and place site-security controls from a threat and criticality assessment, considering layered deterrence, detection, delay, and response.
2. Apply secure design principles such as least privilege, defense in depth, secure defaults, fail-secure behavior, separation of duties, and privacy by design according to the threat model.
3. Rely on a manual checklist performed during emergencies instead of establishing a repeatable preventive or detective control.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Microservices and APIs while accounting for third-party and lifecycle dependencies.

Option review:

A: Facility security is most effective when physical controls are designed as a coordinated system around threats and business criticality. That action can be useful in a different security decision, but it does not most directly address Microservices and APIs in this scenario.

B: Secure architecture uses multiple reinforcing principles so the failure of one control does not become total compromise. That action can be useful in a different security decision, but it does not most directly address Microservices and APIs in this scenario.

C: Manual emergency workarounds are fragile and do not provide the consistent assurance required by the scenario. That action can be useful in a different security decision, but it does not most directly address Microservices and APIs in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Microservices and APIs while accounting for third-party and lifecycle dependencies.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.

Question 26

A control owner at Proseware Labs proposes a quick technical fix for Containerization in the research data repository. The application security architect must address the control objective while maintaining the organization’s stated risk appetite. What should happen FIRST? The architecture contains 9 separately managed trust zones or platform components.

1. Select the security model whose rules match the required confidentiality or integrity objective, and implement the model consistently rather than mixing incompatible assumptions.
2. Choose modern cryptography and key-management practices that match the confidentiality, integrity, authentication, and lifecycle requirements, and protect keys as carefully as the data.
3. Deploy a new security product immediately before confirming scope, ownership, or the required security outcome.
4. Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes.

Correct answer: D

Why: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Containerization while maintaining the organization’s stated risk appetite.

Option review:

A: Formal security models express different protection goals; the model must match the property the system is required to preserve. That action can be useful in a different security decision, but it does not most directly address Containerization in this scenario.

B: Cryptographic strength depends on algorithms, key management, certificate trust, implementation, and lifecycle controls together. That action can be useful in a different security decision, but it does not most directly address Containerization in this scenario.

C: A product-first response can add complexity without proving that the actual governance, risk, or control requirement is satisfied. That action can be useful in a different security decision, but it does not most directly address Containerization in this scenario.

D: Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist. It directly addresses Containerization while maintaining the organization’s stated risk appetite.

Learning point: Assess the architecture-specific attack surface and shared-responsibility boundary, then apply controls tailored to the platform and its failure modes. Different platforms create distinct vulnerabilities; effective mitigation depends on architecture context rather than one universal hardening checklist.