Which of the following is a common vulnerability in client-based systems that can lead to data leakage?

Weak encryption algorithms used in transit

Unencrypted data at rest on the local hard drive

Insufficient database access controls

A company's application is built using microservices that communicate via REST APIs. The security team is concerned about unauthorized access to the APIs. Which of the following is the most effective way to secure the APIs?

Use API keys for each microservice

Implement OAuth 2.0 with scopes and JWT tokens

Encrypt all API traffic with TLS

Rely on network segmentation to limit access to the APIs

Which of the following is a common vulnerability specific to client-based systems?

SQL injection through a web application

Malware infection via malicious email attachments

Insecure API authentication tokens

Misconfigured network firewall rules

A company migrates its customer relationship management (CRM) system to a SaaS provider. The security team is reviewing the shared responsibility model. Which of the following is the customer's responsibility?

Applying security updates to the CRM application code

Managing user access and configuring the application's security settings

Ensuring physical security of the data center hosting the SaaS

Patching the underlying operating system of the SaaS infrastructure

Certified Information Systems Security Professional

Domain 3Objective 5

3.5 - Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements CISSP Practice Questions (Page 2)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

15concepts

13%of the exam

Questions 6–10

6foundation · easy
Which of the following is a common vulnerability in client-based systems that can lead to data leakage?
Select an answer first
7application · medium
A company's application is built using microservices that communicate via REST APIs. The security team is concerned about unauthorized access to the APIs. Which of the following is the most effective way to secure the APIs?
Select an answer first
8foundation · easy
Which of the following is a common vulnerability specific to client-based systems?
Select an answer first
9application · medium
A company migrates its customer relationship management (CRM) system to a SaaS provider. The security team is reviewing the shared responsibility model. Which of the following is the customer's responsibility?
Select an answer first
10foundation · easy
Which of the following is a common vulnerability in High-Performance Computing (HPC) systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.