A data center is being designed with multiple security zones. The architect must balance the need for strong physical access control with the operational requirement for staff to move freely between zones to perform maintenance. Which physical security design best meets both needs?

A single open floor plan with no internal barriers and a security guard at the entrance

Physical keys for all doors and no electronic monitoring

Use of mantraps at every internal door, but no logging

Zoned access with biometric locks on each zone and a centralized access control system that logs all entries

A retail company processes credit card transactions and must comply with PCI DSS. The security team wants to monitor its network for intrusions and ensure that cardholder data is encrypted when stored. Which combination of controls should be implemented?

Use a firewall only and rely on the payment processor for encryption

Deploy an IDS/IPS and encrypt the cardholder database with strong encryption

Implement monitoring but store cardholder data in plaintext to reduce complexity

Encrypt all data in transit but not at rest

Which method is commonly used to monitor infrastructure for security events?

Conducting annual penetration tests

Analyzing system and security logs

A software company is developing a mobile app that handles payment information. The security architect requires that the data be encrypted in transit and at rest, and that the development team follow secure coding practices. Which set of controls should be included in the security architecture?

Implement secure coding practices but skip encryption

Use TLS for all network communications and encrypt the database with AES-256

Rely on the mobile OS to encrypt data automatically

Use a VPN for all communications and store data in plaintext

Information Systems Security Architecture Professional

Domain 3Objective 1

3.1 Identify Infrastructure and System Security Requirements ISSAP Practice Questions (Page 1)

Part of the Infrastructure and System Security Architecture domain, which accounts for 32% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–38 in this domain), expect 7–13 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

6concepts

32%of the exam

Questions 1–5

1expert · hard
A data center is being designed with multiple security zones. The architect must balance the need for strong physical access control with the operational requirement for staff to move freely between zones to perform maintenance. Which physical security design best meets both needs?
Select an answer first
2foundation · easy
Which cryptographic protocol is specifically designed to secure data in transit over a network?
Select an answer first
3application · medium
A retail company processes credit card transactions and must comply with PCI DSS. The security team wants to monitor its network for intrusions and ensure that cardholder data is encrypted when stored. Which combination of controls should be implemented?
Select an answer first
4foundation · easy
Which method is commonly used to monitor infrastructure for security events?
Select an answer first
5application · medium
A software company is developing a mobile app that handles payment information. The security architect requires that the data be encrypted in transit and at rest, and that the development team follow secure coding practices. Which set of controls should be included in the security architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.