In the context of facility-related IoT security, what is the primary purpose of a network segmentation strategy for IoT devices such as smart locks, environmental sensors, and video surveillance cameras?

To ensure all IoT devices receive the same firmware updates simultaneously

To isolate IoT devices from critical business systems to limit the blast radius of a compromise

To reduce the physical attack surface by placing devices in locked enclosures

To enable direct internet access for remote monitoring of all facility devices

In the context of sensor network security, what is the primary purpose of using pairwise keys between neighboring sensor nodes?

To provide a public key for each node to encrypt messages to any other node

To broadcast the same key to all nodes in the network for group communication

To store a key on a central server for all nodes to retrieve

To authenticate and encrypt communication between two specific nodes

Which property is essential for a secure software update mechanism to prevent an attacker from installing a malicious update?

The update package is signed by a trusted publisher and the signature is verified before installation.

The update server is protected by a firewall and intrusion detection system.

The update is delivered over a secure channel such as TLS to the client.

The update is compressed and hashed to reduce download time and detect corruption.

A manufacturer is deploying a new line of smart home devices (IoT). The devices have limited processing power and memory. The security architect is defining the security architecture for these devices. Which of the following is the most critical security control to implement on the device itself?

Use a complex password for the device's admin account.

Implement a secure boot process that verifies the integrity of the firmware before it is loaded.

Disable all unused ports and services on the device.

Encrypt all data stored on the device's flash memory.

Certified Secure Software Lifecycle Professional

Domain 4Objective 1

Define the Security Architecture CSSLP Practice Questions (Page 11)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 117 practice questions to prepare you well beyond it. (estimate)

117questions here

24free pages

43concepts

15%of the exam

43 Concepts in This Objective

SABSA framework
Security chain of responsibility
Federated identity
Security controls identification
Security controls prioritization
Client-server architecture
Peer-to-peer (P2P) architecture
Message queuing architecture
N-tier architecture
Service-oriented architecture (SOA)
Enterprise service bus (ESB)
Web services security
Microservices security
Client-side exploits and threats
Remote code execution risks
Constant connectivity implications
IoT security fundamentals
Wireless security
Location-based services security
RFID security
NFC security
Sensor networks security
Mesh network security
Secure boot
Secure memory
Secure update
SaaS security
PaaS security
IaaS security
Implicit data collection privacy
Side-channel mitigation
Speculative execution mitigation
Secure element
Firmware security
Driver security
AI security
Virtual reality security
Augmented reality security
Facility-related IoT security
Automotive IoT security
Robotics security
Medical device security
Software-defined production processes

Questions 51–55

51foundation · easy
In the context of facility-related IoT security, what is the primary purpose of a network segmentation strategy for IoT devices such as smart locks, environmental sensors, and video surveillance cameras?
Select an answer first
52foundation · easy
In the context of sensor network security, what is the primary purpose of using pairwise keys between neighboring sensor nodes?
Select an answer first
53foundation · easy
Which property is essential for a secure software update mechanism to prevent an attacker from installing a malicious update?
Select an answer first
54application · medium
A manufacturer is deploying a new line of smart home devices (IoT). The devices have limited processing power and memory. The security architect is defining the security architecture for these devices. Which of the following is the most critical security control to implement on the device itself?
Select an answer first
55foundation · easy
In N-tier architecture, which tier is typically responsible for validating user input?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.