A financial services firm is validating a new customer-facing web application. The threat model identified a high-impact, high-probability threat of SQL injection in the search feature. The design includes parameterized queries, but the threat model also flagged that the legacy reporting module, which is out of scope for the redesign, still concatenates user input into SQL strings. The security architect must decide how to validate the design before production. Which action best addresses the gap?

Conduct a functional acceptance test on the search feature to confirm parameterized queries block injection attempts.

Accept the risk for the legacy reporting module because it is out of scope and document the decision in the risk register.

Perform a regression test on the legacy reporting module to ensure existing functionality still works, then deploy.

Evaluate compensating controls for the legacy reporting module, such as a WAF rule or input sanitization, and validate the control's effectiveness.

When a proposed security control is not feasible in the current design, a security architect needs to address the identified threat. What is the most appropriate action?

Accept the risk without documentation

Remove the affected functionality from the design

Ignore the threat until after deployment

Evaluate alternative mitigations or compensating controls

A security architect is validating a new mobile application. The threat model identified a high-probability threat of data leakage through insecure data storage on the device. The design includes encryption of data at rest. The architect wants to validate that the implementation correctly encrypts data. Which validation method is most appropriate?

Use static analysis to scan for insecure storage patterns.

Perform dynamic analysis by running the app and inspecting the data stored on the device.

Conduct a manual code review of the data storage and encryption logic.

Conduct a peer review of the design documents.

A security architect is validating a new container orchestration platform. The threat model identified a high-impact threat of container escape. The design includes running containers as non-root and using seccomp profiles. The architect must validate the design. The threat model also shows that the container runtime has a known vulnerability that could allow escape. The architect is considering patching the runtime or implementing a compensating control such as a pod security policy. Which approach is most appropriate?

Accept the risk because the containers run as non-root.

Patch the container runtime to address the known vulnerability.

Conduct a tabletop exercise to discuss the container escape scenario.

Implement a pod security policy as a compensating control.

Information Systems Security Architecture Professional

Domain 2Objective 2

2.2 Verify and Validate Design (e.g., Functional Acceptance Testing, Regression) ISSAP Practice Questions (Page 1)

Part of the Security Architecture Modeling domain, which accounts for 22% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 8–13 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

22%of the exam

Questions 1–5

1application · medium
A financial services firm is validating a new customer-facing web application. The threat model identified a high-impact, high-probability threat of SQL injection in the search feature. The design includes parameterized queries, but the threat model also flagged that the legacy reporting module, which is out of scope for the redesign, still concatenates user input into SQL strings. The security architect must decide how to validate the design before production. Which action best addresses the gap?
Select an answer first
2foundation · easy
When a proposed security control is not feasible in the current design, a security architect needs to address the identified threat. What is the most appropriate action?
Select an answer first
3application · medium
A security architect is validating a new mobile application. The threat model identified a high-probability threat of data leakage through insecure data storage on the device. The design includes encryption of data at rest. The architect wants to validate that the implementation correctly encrypts data. Which validation method is most appropriate?
Select an answer first
4expert · hard
A security architect is validating a new container orchestration platform. The threat model identified a high-impact threat of container escape. The design includes running containers as non-root and using seccomp profiles. The architect must validate the design. The threat model also shows that the container runtime has a known vulnerability that could allow escape. The architect is considering patching the runtime or implementing a compensating control such as a pod security policy. Which approach is most appropriate?
Select an answer first
5foundation · easy
A security architect asks a colleague who is not involved in the design project to review the architecture for flaws. Which validation method is being applied?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

2.2 Verify and Validate Design (e.g., Functional Acceptance Testing, Regression) ISSAP Practice Questions (Page 1)

Questions 1–5

When a proposed security control is not feasible in the current design, a security architect needs to address the identified threat. What is the most appropriate action?

A security architect asks a colleague who is not involved in the design project to review the architecture for flaws. Which validation method is being applied?

Keep studying — Security Architecture Modeling