Create System Security Design ISSEP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A systems engineer is updating the security design for a medical device that transmits patient data. The traceability matrix currently shows that the requirement 'data at rest must be encrypted' is linked to the design element 'storage encryption module'. However, the design review reveals that the storage encryption module was removed in a recent architecture change. What is the most appropriate action?

   • AUpdate the traceability matrix to link the requirement to a new design element that provides equivalent encryption, and document the change.
   • BRemove the requirement from the traceability matrix because the design element no longer exists.
   • CKeep the old link in the matrix and note that the requirement is 'partially met' to avoid rework.
   • DDelete the traceability matrix and recreate it from scratch after the design stabilizes.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security engineer is maintaining the traceability matrix for a large system. A new security requirement is added: 'all administrative access must be logged'. The engineer needs to identify which design elements are affected. What is the most efficient way to perform this impact analysis?

   • AReview the system architecture diagram to find all components that handle administrative access.
   • BSearch the traceability matrix for design elements linked to similar requirements, such as 'audit logging' or 'administrative access'.
   • CAsk the system administrator to list all components that have administrative interfaces.
   • DConduct a new functional decomposition to identify all sub-functions related to administrative access.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security engineer is designing the audit mechanism for a new financial trading system. The system must record all transactions and access to sensitive data. The engineer is deciding between writing audit logs to a local file on each server or sending them to a centralized log management system. Which design choice best supports the security requirement for non-repudiation?

   • ASend logs to the central system but do not protect them with access controls, because the system is trusted.
   • BWrite logs to local files and also send them to the central system, but allow administrators to edit local logs.
   • CSend logs to a centralized log management system with write-once, read-many (WORM) storage.
   • DWrite logs to local files only, because they are easier to access for troubleshooting.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of a trade-off study in security design?

   • ATo document the final security architecture in detail
   • BTo identify all potential threats to the system
   • CTo test the system's security controls after implementation
   • DTo evaluate alternative security approaches against criteria such as cost, performance, and risk
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a method used to validate a security design?

   • AConducting a cost-benefit analysis
   • BWriting the system security policy
   • CDeploying the system to production
   • DModeling and simulation
   Reveal Solution Discussion Select an answer first