Define the Security Architecture CSSLP Practice Questions (Page 21)

Questions 101–105

1. 101foundation · easy

   In the context of automotive IoT security, what is the primary purpose of a hardware security module (HSM) within an electronic control unit (ECU)?

   • ATo manage the vehicle's infotainment user interface and display
   • BTo provide a backup power source for the ECU during sudden voltage drops
   • CTo securely store cryptographic keys and perform cryptographic operations in a tamper-resistant environment
   • DTo enable over-the-air (OTA) software updates by compressing and downloading firmware
   Reveal Solution Discussion Select an answer first
2. 102foundation · easy

   What is a security vulnerability of RFID technology?

   • ARFID tags are immune to cloning
   • BEavesdropping on the communication between tag and reader
   • CRFID tags cannot be read without physical contact
   • DRFID uses only encrypted communication
   Reveal Solution Discussion Select an answer first
4. 103foundation · easy

   What is the primary purpose of speculative execution in modern processors?

   • ATo reduce power consumption by idling unused processor cores
   • BTo encrypt data in transit between the CPU and memory
   • CTo enforce memory protection by checking permissions before every instruction
   • DTo improve performance by executing instructions before it is certain they are needed
   Reveal Solution Discussion Select an answer first
5. 104foundation · easy

   Which security objective is MOST critical when designing a connected insulin pump that can be remotely adjusted by a clinician?

   • APrioritizing patient safety and the integrity of the device's therapeutic function
   • BMaximizing battery life by minimizing the use of cryptographic operations
   • CGuaranteeing that the device's wireless communication is encrypted to protect patient data
   • DEnsuring the device's firmware can be updated over the air without user interaction
   Reveal Solution Discussion Select an answer first
6. 105foundation · easy

   Which of the following best describes the primary purpose of firmware security in a secure software lifecycle?

   • ATo encrypt all data stored on the device's hard drive to prevent unauthorized access.
   • BTo manage user authentication and access control for the operating system.
   • CTo provide a firewall that filters network traffic to and from the device.
   • DTo ensure that low-level code embedded in hardware is protected against unauthorized modification and executes as intended.
   Reveal Solution Discussion Select an answer first