Certified Information Systems Security Professional
Domain 3Objective 5
3.5 - Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements CISSP Practice Questions (Page 1)
Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)
29questions here
6free pages
15concepts
13%of the exam
Questions 1–5
- 1
A company uses a cloud-based key management service (KMS) to store encryption keys. The security team is concerned about the risk of a malicious insider at the cloud provider. Which of the following is the most effective mitigation?
Select an answer first - 2
In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the customer in an IaaS deployment?
Select an answer first - 3
Which of the following is a common vulnerability in cloud-based systems?
Select an answer first - 4
Which of the following is a common vulnerability in microservices architectures?
Select an answer first - 5
Which of the following is a common vulnerability in Industrial Control Systems (ICS)?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.