Create System Security Design ISSEP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A defense contractor is designing a new ground control station for an unmanned aerial vehicle. The system must provide secure remote access for operators, but the initial functional decomposition only allocated 'user authentication' to the operator workstation component. During a design review, the security engineer notes that the requirement 'all remote sessions must be encrypted' has not been allocated to any component. Which action best addresses this gap?

   • ADocument the encryption requirement in the system security plan but do not allocate it to any component, as it is an operational policy.
   • BAdd a new sub-function 'encrypt remote session traffic' and allocate it to the communication gateway component, then update the traceability matrix.
   • CAssume the operator workstation's authentication function also covers encryption because both are part of the remote access session.
   • DRevise the security requirements to remove the encryption requirement because it is not feasible with the current architecture.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In system security design, what is the role of audit mechanisms?

   • ATo record and review security-relevant events for accountability and detection
   • BTo encrypt data at rest and in transit
   • CTo authenticate users before granting access
   • DTo define the security policy for the system
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the systems engineering process, what is the primary purpose of functional analysis and allocation?

   • ATo identify the security threats and vulnerabilities that the system must mitigate
   • BTo decompose system-level functions into sub-functions and assign them to specific system components
   • CTo verify that the final system meets the operational needs of the end user
   • DTo determine the cost and schedule for developing the system components
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security engineer is updating the traceability matrix for a system that is being modified to add a new encryption algorithm. The matrix currently links the requirement 'data must be encrypted' to the design element 'crypto module'. The engineer plans to replace the crypto module with a new one that supports the new algorithm. What is the most important action to maintain traceability?

   • ACreate a new requirement for the new algorithm and link it to the new module, leaving the old requirement unlinked.
   • BKeep the old link and add a note that the new module is a 'drop-in replacement'.
   • CRemove the requirement from the matrix because the design element is changing.
   • DUpdate the matrix to link the requirement to the new crypto module and document the change.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security architect is designing a new intrusion detection system (IDS) for a corporate network. The design uses a machine learning algorithm to detect anomalies. The architect wants to validate that the algorithm can accurately detect known attack patterns without excessive false positives. Which validation method is most appropriate?

   • ADeploy the IDS in production and monitor its alerts for a month.
   • BConduct a design review with the security operations team to discuss the algorithm's expected behavior.
   • CUse the vendor's published performance metrics to confirm the algorithm works as advertised.
   • DRun a simulation using a dataset of network traffic that includes known attack patterns and normal traffic.
   Reveal Solution Discussion Select an answer first