Which platform security concern is unique to containerized environments compared to traditional virtual machines?

Patch management for the guest operating system

Hypervisor escape vulnerabilities

Firmware integrity verification

Which platform security measure is most directly responsible for verifying the integrity of a server's boot process?

Secure Boot and Trusted Platform Module (TPM)

Host-based intrusion detection system (HIDS)

In the cloud shared responsibility model, which security control is typically the responsibility of the customer in an IaaS deployment?

Network infrastructure security

Physical security of the data center

Patching the guest operating system

What is a primary security challenge specific to operational technology (OT) systems such as SCADA?

They use only proprietary protocols that are inherently secure

They are always connected to the internet for remote monitoring

They do not require authentication because they are isolated

They are typically designed for high availability and safety, making security patching difficult

Which control is commonly used to protect industrial control systems (ICS) from network-based attacks originating from corporate IT networks?

Demilitarized zone (DMZ) with firewalls

Using only wireless connections for ICS devices

Installing antivirus software on all PLCs

Disabling all logging on ICS devices

Information Systems Security Architecture Professional

Domain 3Objective 2

3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 2)

Part of the Infrastructure and System Security Architecture domain, which accounts for 32% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–38 in this domain), expect 7–13 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

14concepts

32%of the exam

Questions 6–10

6foundation · easy
Which platform security concern is unique to containerized environments compared to traditional virtual machines?
Select an answer first
7foundation · easy
Which platform security measure is most directly responsible for verifying the integrity of a server's boot process?
Select an answer first
8foundation · easy
In the cloud shared responsibility model, which security control is typically the responsibility of the customer in an IaaS deployment?
Select an answer first
9foundation · easy
What is a primary security challenge specific to operational technology (OT) systems such as SCADA?
Select an answer first
10foundation · easy
Which control is commonly used to protect industrial control systems (ICS) from network-based attacks originating from corporate IT networks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.