Define the Security Architecture CSSLP Practice Questions (Page 22)

Questions 106–110

1. 106foundation · easy

   Which of the following best describes the purpose of secure memory management in software design?

   • ATo reduce the total amount of memory used by an application
   • BTo prevent unauthorized access to memory contents and mitigate vulnerabilities such as buffer overflows and use-after-free
   • CTo ensure that memory is encrypted at rest in non-volatile storage
   • DTo increase the speed of memory allocation and deallocation operations
   Reveal Solution Discussion Select an answer first
2. 107foundation · easy

   What is a primary security consideration for wireless communication?

   • AEnsuring that signals cannot travel beyond the building
   • BPhysical security of the network cables
   • CEncryption to protect data from eavesdropping
   • DUsing only open networks for simplicity
   Reveal Solution Discussion Select an answer first
4. 108expert · hard

   A security architect is reviewing the implementation of a cryptographic algorithm used to verify a PIN in a hardware security module (HSM). The implementation uses a simple if-else comparison that exits early when a digit does not match. The architect is concerned about a timing side-channel attack. Which mitigation is the most effective?

   • AUse a faster processor to reduce the overall time of the comparison.
   • BDisable the HSM's debug logging to prevent information leakage.
   • CAdd a random delay before responding to each PIN verification attempt.
   • DRewrite the comparison logic to use a constant-time algorithm that performs the same number of operations regardless of the input.
   Reveal Solution Discussion Select an answer first
5. 109foundation · easy

   Which security property is most critical to preserve for the virtual objects displayed in an augmented reality application?

   • AConfidentiality of the object's 3D model data at rest
   • BNon-repudiation of the user's interactions with virtual objects
   • CIntegrity of the rendered content and its alignment with the physical world
   • DAvailability of the AR cloud service that supplies the content
   Reveal Solution Discussion Select an answer first
6. 110foundation · easy

   In the context of secure software architecture, what is the primary purpose of incorporating AI security considerations during the design phase?

   • ATo guarantee that the AI system cannot be attacked by any external threat actor
   • BTo ensure the AI model performs with high accuracy on training data
   • CTo identify and mitigate security risks specific to AI components, such as adversarial attacks and data poisoning
   • DTo replace traditional security controls with AI-based defenses
   Reveal Solution Discussion Select an answer first