Apply System Security Principles ISSEP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which design approach most directly improves system resilience by reducing the likelihood that a single common vulnerability will affect all redundant components?

   • APlacing all redundant components in the same physical location
   • BIncreasing the number of redundant components without changing their design
   • CImplementing identical redundant components to ensure consistent behavior
   • DUsing component diversity so redundant elements are not identical
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why does economy of mechanism improve security?

   • AIt makes the system more user-friendly
   • BIt increases the number of security layers
   • CIt ensures that security mechanisms are always fail closed
   • DIt reduces the attack surface by minimizing code and features
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the core idea behind the 'secure-by-default' principle?

   • AUsers must configure security settings themselves
   • BSecurity features are optional add-ons
   • CSystems are configured with the most secure settings as the baseline
   • DSecurity is only applied after a breach occurs
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A defense contractor operates a mission-critical authentication service that issues certificates for weapon-system components. The service runs on two active-active servers in the same rack, each with identical hardware and the same operating system image. A recent cooling failure in that rack caused both servers to overheat and shut down simultaneously, taking the service offline. The contractor wants to redesign the service to prevent a single environmental event from causing a total outage. Which design change best addresses the root cause?

   • AAdd a third identical server in the same rack to provide additional capacity.
   • BPlace one server in a different rack with independent power and cooling, and use different hardware models.
   • CMove both servers to a single larger rack with redundant cooling units.
   • DKeep the current configuration but add an uninterruptible power supply to the rack.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A large enterprise is migrating a legacy monolithic application to a microservices architecture. The legacy application runs with a single service account that has broad permissions across the database, file system, and message queue. The security team wants to apply least privilege to the new microservices. However, the development team is concerned that managing many service accounts will be operationally complex. Which approach best balances least privilege and operational efficiency?

   • AUse the existing broad service account for all microservices but add network segmentation between them.
   • BCreate one shared service account for all microservices to minimize administrative overhead.
   • CCreate a unique service account for each microservice with only the permissions required for that service's function.
   • DCreate two service accounts: one for read-only operations and one for write operations, shared across all microservices.
   Reveal Solution Discussion Select an answer first