What is the primary purpose of a system controller in a physical access control system (PACS)?

To authenticate users via biometric data

To record video footage of entry points

To provide physical barriers that prevent unauthorized entry

To manage and enforce access decisions for connected doors and readers

A company is deploying a new application on a set of virtual machines (VMs) in a private cloud. The security architect is concerned about the security of the hypervisor and the isolation between VMs. Which control is most directly relevant to mitigating a hypervisor compromise?

Use full disk encryption on the virtual hard disks of each VM.

Ensure the hypervisor is patched regularly and that management interfaces are isolated on a dedicated management network.

Implement network segmentation between the VMs using virtual local area networks (VLANs).

Deploy a host-based intrusion detection system (HIDS) on each VM.

Which endpoint security technology monitors and collects data from endpoints to detect and respond to threats in real time, often using behavioral analysis?

Host-based intrusion prevention system (HIPS)

Endpoint detection and response (EDR)

Which technology is commonly used to enable secure file transfers between an organization and a third-party partner?

Hypertext Transfer Protocol (HTTP)

Trivial File Transfer Protocol (TFTP)

Secure File Transfer Protocol (SFTP)

Which infrastructure monitoring tool is specifically designed to collect and analyze logs from various systems to detect security incidents?

Configuration management database (CMDB)

Application performance monitoring (APM)

Network performance monitor (NPM)

Security information and event management (SIEM)

Information Systems Security Architecture Professional

Domain 3Objective 2

3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 4)

Part of the Infrastructure and System Security Architecture domain, which accounts for 32% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–38 in this domain), expect 7–13 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

14concepts

32%of the exam

Questions 16–20

16foundation · easy
What is the primary purpose of a system controller in a physical access control system (PACS)?
Select an answer first
17application · medium
A company is deploying a new application on a set of virtual machines (VMs) in a private cloud. The security architect is concerned about the security of the hypervisor and the isolation between VMs. Which control is most directly relevant to mitigating a hypervisor compromise?
Select an answer first
18foundation · easy
Which endpoint security technology monitors and collects data from endpoints to detect and respond to threats in real time, often using behavioral analysis?
Select an answer first
19foundation · easy
Which technology is commonly used to enable secure file transfers between an organization and a third-party partner?
Select an answer first
20foundation · easy
Which infrastructure monitoring tool is specifically designed to collect and analyze logs from various systems to detect security incidents?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.