A security architect is designing a new web application that will handle sensitive customer data. The architect wants to apply the principle of defense in depth. Which of the following is the most appropriate implementation?

Implement multiple layers of security controls, including network segmentation, firewalls, intrusion detection systems, and application-level access controls.

Implement a single strong authentication mechanism and rely on it to protect the application.

Implement a strong encryption mechanism for all data at rest and in transit.

Implement a single firewall at the network perimeter and rely on it to protect the application.

What is the primary goal of ISO/IEC 27001?

To specify encryption algorithms for data in transit

To define specific technical security controls for network devices

To provide a framework for secure software development

To establish, implement, maintain, and improve an information security management system (ISMS)

Which of the following is a key input to the security engineering process?

Security accreditation decision

Information Systems Security Engineering Professional

Domain 1Objective 1

Apply Systems Security Engineering Fundamentals ISSEP Practice Questions (Page 1)

Part of the Systems Security Engineering Foundations domain, which accounts for 24% of the ISSEP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

8concepts

24%of the exam

8 Concepts in This Objective

Trust concepts in systems security engineering
Trust hierarchies
Relationship between systems engineering and security engineering
Security engineering process inputs and outputs
NIST systems security engineering framework
ISO/IEC 27001 security management principles
Structural security design principles
Integrating security into system architecture

Questions 1–5

1foundation · easy
Which NIST publication is the primary reference for the systems security engineering framework?
Select an answer first
2foundation · easy
Which principle states that users should be granted only the access necessary to perform their duties?
Select an answer first
3application · medium
A security architect is designing a new web application that will handle sensitive customer data. The architect wants to apply the principle of defense in depth. Which of the following is the most appropriate implementation?
Select an answer first
4foundation · easy
What is the primary goal of ISO/IEC 27001?
Select an answer first
5foundation · easy
Which of the following is a key input to the security engineering process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSEP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSEP” is a trademark of its owner, used for identification only.

Apply Systems Security Engineering Fundamentals ISSEP Practice Questions (Page 1)

Questions 1–5

Which NIST publication is the primary reference for the systems security engineering framework?

Which principle states that users should be granted only the access necessary to perform their duties?

A security architect is designing a new web application that will handle sensitive customer data. The architect wants to apply the principle of defense in depth. Which of the following is the most appropriate implementation?

What is the primary goal of ISO/IEC 27001?

Which of the following is a key input to the security engineering process?

Keep studying — Systems Security Engineering Foundations