An embedded device in a smart home hub uses a hardcoded encryption key to secure communication with the cloud. An attacker extracts the key from the device's firmware. Which of the following is the most significant risk?

The attacker can impersonate the cloud server

The attacker can decrypt all past and future communications from any device using the same key

The attacker can modify the device's firmware

The attacker can perform a denial-of-service attack on the device

Which of the following is a common vulnerability in containerized environments?

Weak default credentials on IoT devices

A company hosts multiple virtual machines on a single hypervisor. A security audit reveals that a vulnerability in the hypervisor could allow a VM to access the host's memory. Which of the following is the most effective mitigation?

Use VM encryption to protect data at rest

Implement network segmentation between VMs

Apply hypervisor security patches promptly

Use a different hypervisor vendor

Which of the following is a common vulnerability in database systems?

Buffer overflow in the operating system

Lack of physical tamper protection

Certified Information Systems Security Professional

Domain 3Objective 5

3.5 - Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements CISSP Practice Questions (Page 3)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

15concepts

13%of the exam

Questions 11–15

11foundation · easy
Which of the following is a common vulnerability in edge computing systems?
Select an answer first
12application · medium
An embedded device in a smart home hub uses a hardcoded encryption key to secure communication with the cloud. An attacker extracts the key from the device's firmware. Which of the following is the most significant risk?
Select an answer first
13foundation · easy
Which of the following is a common vulnerability in containerized environments?
Select an answer first
14application · medium
A company hosts multiple virtual machines on a single hypervisor. A security audit reveals that a vulnerability in the hypervisor could allow a VM to access the host's memory. Which of the following is the most effective mitigation?
Select an answer first
15foundation · easy
Which of the following is a common vulnerability in database systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.