3.4 - Understand Security Capabilities of Information Systems (IS) (e.g., Memory Protection, Trusted Platform Module (TPM), Encryption/decryption) CISSP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which virtualization security feature protects the confidentiality of a virtual machine's disk data when it is stored on the host's physical storage?

   • ANetwork segmentation
   • BSnapshot management
   • CVM encryption
   • DHypervisor isolation
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A software vendor distributes a critical security patch to customers. The vendor wants to ensure that (1) the patch has not been tampered with during download and (2) customers can verify that the patch genuinely came from the vendor. The patch is too large to encrypt with the vendor's private key. Which approach should the vendor use?

   • ACompress the patch and add a cyclic redundancy check (CRC) value.
   • BCompute a hash of the patch, encrypt the hash with the vendor's private key, and distribute the patch with the encrypted hash as a digital signature.
   • CEncrypt the patch with the customer's public key and send the private key separately.
   • DEncrypt the patch with a symmetric key and send the symmetric key encrypted with the vendor's public key.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A software-as-a-service (SaaS) application stores customer data in a multi-tenant database. The application vendor wants to ensure that even if the database is compromised, the customer's most sensitive fields (e.g., API keys) remain unreadable. The vendor has full control over the application code but not the database server configuration. Which approach should the vendor implement?

   • AEncrypt the sensitive fields in the application code before storing them in the database.
   • BUse a database firewall to block access to the sensitive columns.
   • CEnable Transparent Data Encryption (TDE) on the database.
   • DStore the sensitive fields in a separate database with restricted access.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the purpose of a digital certificate in a PKI?

   • ATo store the certificate holder's password
   • BTo encrypt the private key of the certificate holder
   • CTo provide a backup of the certificate holder's data
   • DTo bind a public key to an identity, such as a person or device
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary characteristic of Transparent Data Encryption (TDE) in a database?

   • AIt encrypts data only when it is transmitted over the network
   • BIt encrypts the database files at the storage level without requiring changes to the application
   • CIt provides a firewall for the database server
   • DIt encrypts individual columns within a table, requiring application changes
   Reveal Solution Discussion Select an answer first