A power utility is upgrading its ICS network. The new design includes remote access for vendors to troubleshoot equipment. The security team must balance the need for vendor access with the risk of unauthorized access. Which of the following is the most secure approach?

Allow vendors to connect via a remote desktop protocol (RDP) directly to the ICS devices

Disable remote access and require vendors to be on-site

Use a jump server with multi-factor authentication and session recording

Provide vendors with a VPN connection directly to the ICS network

A medical device manufacturer uses a symmetric key to encrypt patient data at rest. The key is stored in the firmware of each device. A security assessment reveals that the key is identical across all devices and has been extracted from a single device. Which of the following is the most significant cryptographic vulnerability?

The key is not rotated periodically

The key is stored insecurely and is shared across all devices

The device lacks a secure boot mechanism

The algorithm used for encryption is weak

A retail company deploys edge computing devices in stores to process customer data locally and reduce latency. The devices are physically accessible to the public. Which of the following is the most significant vulnerability?

The devices may have outdated operating systems

The devices may not have sufficient processing power

The devices may use unencrypted wireless communication

The devices may be stolen or tampered with

Certified Information Systems Security Professional

Domain 3Objective 5

3.5 - Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements CISSP Practice Questions (Page 5)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

15concepts

13%of the exam

Questions 21–25

21expert · medium
A power utility is upgrading its ICS network. The new design includes remote access for vendors to troubleshoot equipment. The security team must balance the need for vendor access with the risk of unauthorized access. Which of the following is the most secure approach?
Select an answer first
22foundation · easy
Which of the following is a common vulnerability in IoT devices?
Select an answer first
23application · medium
A medical device manufacturer uses a symmetric key to encrypt patient data at rest. The key is stored in the firmware of each device. A security assessment reveals that the key is identical across all devices and has been extracted from a single device. Which of the following is the most significant cryptographic vulnerability?
Select an answer first
24foundation · easy
Which of the following is a common vulnerability in virtualized environments?
Select an answer first
25application · medium
A retail company deploys edge computing devices in stores to process customer data locally and reduce latency. The devices are physically accessible to the public. Which of the following is the most significant vulnerability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

3.5 - Assess and Mitigate the Vulnerabilities of Security Architectures, Designs, and Solution Elements CISSP Practice Questions (Page 5)

Questions 21–25

A power utility is upgrading its ICS network. The new design includes remote access for vendors to troubleshoot equipment. The security team must balance the need for vendor access with the risk of unauthorized access. Which of the following is the most secure approach?

Which of the following is a common vulnerability in IoT devices?

Which of the following is a common vulnerability in virtualized environments?

A retail company deploys edge computing devices in stores to process customer data locally and reduce latency. The devices are physically accessible to the public. Which of the following is the most significant vulnerability?

Keep studying — Security Architecture and Engineering