A web server process needs to read files from a specific directory. According to least privilege, what permissions should the process be granted?

Full administrative privileges on the server

Read and write to the entire file system

Read and execute access to all system files

Read-only access to that specific directory

What is the primary purpose of separation of duties in a security context?

To reduce the number of employees needed for a task

To ensure that no single individual has control over all critical functions

A healthcare organization stores patient records in a database and also uses the data for research. The research team needs to analyze patient outcomes but does not need to know patient identities. The security team wants to protect the data while still enabling the research. Which control best meets this requirement?

Provide the research team with a masked or de-identified copy of the data that removes direct identifiers.

Encrypt the entire database and give the research team the encryption key.

Grant the research team read-only access to the production database.

Move the data to a separate server and give the research team full access to that server.

What is the primary purpose of incorporating redundancy into a system design?

To simplify the system architecture

To reduce the cost of system maintenance

To ensure the system remains operational if a component fails

To eliminate the need for security monitoring

Information Systems Security Engineering Professional

Domain 3Objective 2

Apply System Security Principles ISSEP Practice Questions (Page 1)

Part of the Security Planning and Engineering domain, which accounts for 22% of the ISSEP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

22%of the exam

Questions 1–5

1foundation · easy
For a door lock on a secure data center, which failure mode is most appropriate to ensure security is maintained if the locking mechanism fails?
Select an answer first
2foundation · easy
A web server process needs to read files from a specific directory. According to least privilege, what permissions should the process be granted?
Select an answer first
3foundation · easy
What is the primary purpose of separation of duties in a security context?
Select an answer first
4application · medium
A healthcare organization stores patient records in a database and also uses the data for research. The research team needs to analyze patient outcomes but does not need to know patient identities. The security team wants to protect the data while still enabling the research. Which control best meets this requirement?
Select an answer first
5foundation · easy
What is the primary purpose of incorporating redundancy into a system design?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSEP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSEP” is a trademark of its owner, used for identification only.

Apply System Security Principles ISSEP Practice Questions (Page 1)

Questions 1–5

For a door lock on a secure data center, which failure mode is most appropriate to ensure security is maintained if the locking mechanism fails?

A web server process needs to read files from a specific directory. According to least privilege, what permissions should the process be granted?

What is the primary purpose of separation of duties in a security context?

What is the primary purpose of incorporating redundancy into a system design?

Keep studying — Security Planning and Engineering