Apply Systems Security Engineering Fundamentals ISSEP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a key principle of ISO/IEC 27001?

   • AAchieving a one-time certification without ongoing review
   • BImplementing all security controls from a predefined list
   • CFocusing solely on technical security measures
   • DContinual improvement of the information security management system
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A systems engineering team is developing a new medical device. The security engineer is tasked with integrating security activities into the systems engineering lifecycle. Which of the following is the most appropriate approach?

   • APerform security activities only during the design phase to ensure that security requirements are incorporated into the system design.
   • BConduct security activities in parallel with systems engineering activities, ensuring that security artifacts are aligned with systems engineering artifacts at each phase.
   • CPerform security activities only after the system is fully developed to avoid impacting the systems engineering process.
   • DOutsource all security activities to a third-party security firm to ensure independence and objectivity.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of NIST SP 800-160?

   • ATo provide a framework for integrating security into the systems engineering lifecycle
   • BTo specify encryption algorithms for data at rest
   • CTo provide a risk management framework for federal agencies
   • DTo define specific security controls for cloud systems
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is an example of integrating security into system architecture?

   • ADesigning network segmentation to isolate sensitive data
   • BUsing the same password for all system components
   • CAdding a firewall after a security breach
   • DDisabling security logs to improve performance
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security engineer is documenting the outputs of the security engineering process for a new system. The engineer is preparing to present the security engineering artifacts to the systems engineering team. Which of the following is a key output of the security engineering process?

   • AThe system's security requirements and architecture.
   • BThe system's maintenance plan and disposal procedures.
   • CThe system's functional requirements and design constraints.
   • DThe system's operational environment and threat model.
   Reveal Solution Discussion Select an answer first