Define the Security Architecture CSSLP Practice Questions (Page 14)

Questions 66–70

1. 66foundation · easy

   In the context of SaaS security, which statement best describes the division of security responsibilities between the cloud provider and the customer?

   • AThe customer is responsible for securing the application code and the operating system, while the provider manages physical security only.
   • BThe provider secures the underlying infrastructure and the application, while the customer manages user access and data usage.
   • CThe provider is responsible for all security aspects, including user authentication and data classification.
   • DThe customer is responsible for patching the application, while the provider manages network and physical security.
   Reveal Solution Discussion Select an answer first
2. 67foundation · easy

   In a secure software architecture, which practice is most directly associated with reducing the risk posed by device drivers?

   • ACompiling drivers with debugging symbols to ease future maintenance.
   • BUsing signed drivers only from hardware vendors to ensure they are free of vulnerabilities.
   • CDisabling all device drivers by default and enabling them only when needed.
   • DRunning drivers in user mode whenever possible and applying the principle of least privilege.
   Reveal Solution Discussion Select an answer first
4. 68foundation · easy

   In a Platform as a Service (PaaS) model, which security responsibility is typically shared between the cloud provider and the customer?

   • APhysical security of the data center
   • BPatch management of the application framework
   • CConfiguration of the underlying operating system
   • DIdentity and access management for the application users
   Reveal Solution Discussion Select an answer first
5. 69foundation · easy

   Which of the following is a common technique used to verify the authenticity and integrity of firmware during the boot process?

   • AEncrypting the firmware with a symmetric key shared with all devices of the same model.
   • BChecking that the firmware file size matches the size recorded in the boot loader.
   • CDigital signature verification using a trusted public key embedded in the device.
   • DComparing the firmware's hash to a value stored in a plaintext configuration file.
   Reveal Solution Discussion Select an answer first
6. 70foundation · easy

   Which of the following is a common security mechanism used to authenticate messages on the CAN bus in modern automotive systems?

   • ATransport Layer Security (TLS) with client certificates
   • BWired Equivalent Privacy (WEP) encryption
   • CPublic key infrastructure (PKI) with per-frame digital signatures
   • DMessage authentication codes (MACs) using symmetric keys
   Reveal Solution Discussion Select an answer first