3.2 Architect Infrastructure and System Security ISSAP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which security control is essential for protecting email communications from eavesdropping and tampering?

   • ASender Policy Framework (SPF)
   • BEmail archiving
   • CSpam filtering
   • DEmail encryption (e.g., S/MIME or PGP)
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which cloud service model provides the customer with the least control over the underlying infrastructure?

   • AFunction as a Service (FaaS)
   • BInfrastructure as a Service (IaaS)
   • CSoftware as a Service (SaaS)
   • DPlatform as a Service (PaaS)
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A regional water utility is modernizing its SCADA system. The engineering team wants to connect the programmable logic controllers (PLCs) to the corporate IT network for real-time dashboard reporting. The utility's security architect must ensure that a compromise of the corporate network cannot directly reach the PLCs, while still allowing the dashboard to receive telemetry. Which approach best satisfies the requirement?

   • AInstall a firewall between the IT and OT networks and open the ports required for the dashboard to query the PLCs directly.
   • BPlace the PLCs on a dedicated OT network segment and use a unidirectional gateway to push telemetry to a read-only data historian on the IT network.
   • CConnect the PLCs to the IT network and rely on host-based firewalls on each PLC to block unauthorized traffic.
   • DDeploy a VPN concentrator on the OT network and require all dashboard traffic to traverse the VPN.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which network security mechanism creates an encrypted tunnel between two endpoints over an untrusted network, such as the internet?

   • AWeb application firewall (WAF)
   • BNetwork access control (NAC)
   • CDomain Name System (DNS)
   • DVirtual private network (VPN)
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary security benefit of using federation for third-party integrations?

   • AIt provides a physical airgap between networks
   • BIt encrypts all data stored in the third-party system
   • CIt eliminates the need for any authentication
   • DIt allows users to use a single set of credentials across multiple organizations
   Reveal Solution Discussion Select an answer first