Model (non-Functional) Security Properties and Constraints CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A development team is building a microservices-based application. The security architect has mandated that all inter-service communication must be encrypted. Which architectural constraint does this impose on the design?

   • AAll services must run on the same physical server.
   • BAll services must be written in the same programming language.
   • CThe system must use a single shared database.
   • DEvery service must support TLS for all communication channels.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security architect is using architectural views to model the security properties of a new system. Which view is most appropriate for showing how authentication and authorization are enforced across components?

   • AA deployment view showing the physical servers and network segments.
   • BA logical view showing components and their interactions, with security annotations.
   • CA process view showing the runtime threads and processes.
   • DA data view showing the database schema.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security architect is defining constraints for a new document management system. The system must ensure that only authorized users can modify documents, and that any modification is logged. Which security property is being constrained?

   • AConfidentiality
   • BIntegrity
   • CNon-repudiation
   • DAvailability
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A software architect is applying a security pattern to enforce access control in a new application. Which pattern is most appropriate for centralizing authorization decisions?

   • AFactory pattern.
   • BPolicy enforcement point (PEP) and policy decision point (PDP) pattern.
   • CSingleton pattern.
   • DObserver pattern.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of a security constraint that could be imposed on a software system?

   • AThe system must support 10,000 concurrent users
   • BThe system must respond to user requests within 2 seconds
   • CThe system must be developed using an agile methodology
   • DThe system must use multi-factor authentication for all administrative access
   Reveal Solution Discussion Select an answer first