What is the purpose of data masking?

To replace sensitive data with realistic but fictitious values

Which practice best exemplifies separation of interfaces and functions to reduce attack surface?

Placing the web server in a DMZ and the database on an internal network with separate interfaces

Using a single firewall rule to allow all traffic

Running a web server and a database on the same host with the same network interface

Giving all users the same role and permissions

Which mitigation strategy directly addresses a single point of failure in a network?

Increasing the bandwidth of the network link

Implementing redundant network paths and devices

Using a single high-quality router

Applying stricter firewall rules

An online retailer runs its application on a single Kubernetes cluster in one cloud region. The application consists of a web front end, a payment service, and a database. The retailer wants to improve availability and reduce the risk of a single point of failure. The budget is limited, and the team wants to minimize operational complexity. Which approach best meets these constraints?

Move the database to a separate cloud provider to avoid a single-vendor dependency.

Run multiple replicas of each service within the same cluster and configure the database for high availability within the same region.

Keep the current single-cluster deployment but add more replicas of the database.

Deploy the application to a second Kubernetes cluster in a different region and use a global load balancer.

What is a key benefit of integrating security into a SecDevOps (DevSecOps) pipeline?

Security controls are removed to speed up deployment

Security is handled by a separate team after deployment

Security vulnerabilities are identified and addressed early in the development process

Security testing is performed only at the end of the development cycle

Information Systems Security Engineering Professional

Domain 3Objective 2

Apply System Security Principles ISSEP Practice Questions (Page 3)

Part of the Security Planning and Engineering domain, which accounts for 22% of the ISSEP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

22%of the exam

Questions 11–15

11foundation · easy
What is the purpose of data masking?
Select an answer first
12foundation · easy
Which practice best exemplifies separation of interfaces and functions to reduce attack surface?
Select an answer first
13foundation · easy
Which mitigation strategy directly addresses a single point of failure in a network?
Select an answer first
14expert · hard
An online retailer runs its application on a single Kubernetes cluster in one cloud region. The application consists of a web front end, a payment service, and a database. The retailer wants to improve availability and reduce the risk of a single point of failure. The budget is limited, and the team wants to minimize operational complexity. Which approach best meets these constraints?
Select an answer first
15foundation · easy
What is a key benefit of integrating security into a SecDevOps (DevSecOps) pipeline?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSEP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSEP” is a trademark of its owner, used for identification only.